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(EKB) tC J;cTMffBTtgf«tx— ^T^S :i <!: Sr 
# b T«fffHfE»«#: tC^fe^fl-T ^ X 5^ y 7" S tJ <h «r 

[W*^2 5] tfrBaw«fB^:^s«> se>t-> 20 

-A*«BK-r^#/1^r-y hlcSfSBt^im^ (ATS) €r 
SfrfES«B#^JtS^ (ATS) CD#JD$nfem±©/'^^r 

tt« «frfH5K-^+t$s<t> mm^mt^-^^m'r-'^ tm 30 

fS§:mB#^Jttlfi (ATS) <£-^ti:/n-vi7 5"-— 37H^W 
TUt-^'ft^— t bT©:7*P y ^- ^^fiKT-S t 

mtr^ttdtja 2 2 [CBH«©««fH»:^ffi« 

2 6 ] ttriB*{s««i§tt^Msx 7^ -y y 
m^f^mL^mm.-t^\f.y h?ij&2jftigc?S5'jiictosab 

«9fH2JiSc?S^J=&^fi!tb, ^fi5t2jt^?S9>Ji:Wreia®« 40 

f, row .t ©?s^5a3S?r*^f bT«:-^t»ffi(?3^ 

«aaS:l*?fT'5>c:i:*!|tia;fr-2)»*«l 9 icE^cDft 
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nff -r ^«^«aax 5^ T'i . 

^«#tr«tijft$n. 1tft®E®i«#tCi3ViT^tjS/j:X^' 

>/1- I D. *fctt®^<?)E^«E#tt@*-7i£5=^-i'X^:7 I 

^-5 t/i«at-^Maffl®^— ® ''^Ttl/O^c05^— ^' 
SfrEie«tS#«#«!iax5^ >y IE®iK<**^ 

fi^^ 2 8 {cEm®1t^W^:^i*. 
8 {CE«««^«^:^fe. 

ME«#ffiax5^-yy«, 

a^tiTt&E=i >5=- > ym^=¥- *5fefig-r •& x 5^ y 

g^U-^tb, §^J-te<fey-K<i:bT#/-H, 'J- 

Vi-rn75^tr^tr+-lcJ: 0Bt^{tb/c*^{t:^-:7'D 
i/ (EKB) \Z^-oXmm'SJt&tiy'-'S'-^$>^Z.t^m 

[tf*iS3 2] HffE«^=^^-^BKffl7^-^«> ^^©W 
3Sff^^«ICt5liT*ia;^CVX^'-^-, ifcttiWf^CD 
ES«S<*:tcH*ro 7^— OV»-rn*^T«) S i: 

<^wiiz-r ^m^^3 1 icE«o«^s***o 
stiE«#Jaax-7^>y7^«, 

^ -^BKffl 7^- iS' WlttftS^ ^ E#B#1«:f^#^ t b T flfj 
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-A<&1#fiK-r^§/'^'^-y h«::S«S*^Jt»^ (ATS) ^ 

ttiii^mmmmm (ats) ©#snsnfcm±«/'?y 

(ATS) *-^tjyD>y5'5^— ^'1I*0#*D«IBT? 
fe^^D y >? H <»: &^tyx-^ tcao*l^T«^^- 

:S 3 1 ICfSKcO'ttffiS^:^*. 

^Ms^^ff-r -s c t. ^mw.t.t^^i^^ 2 8 tciHtto 
pi«g/j:Bt^{t n > 5^ > >y efeiW L ^ <t -h-r •& « 
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ff -r -& Bt^^aax 7- -y y <t . 

>&*-r -5 t Sr!|$ISi-r S r D if 7 
[0 0 0 1] 

^w^SB. w^ffi^;^*. ^^xsmm. 

tf^W^SB, «$BE®:^ffi. tt^S^:^^&< *5cfc 

[0 0 0 2] ft<!^e<){C«, #E®S*St»SS:n^*® 
('J-:7) lcHEBbAc«jS®iiEm*ffiS:fflVi. E 

E&«i!^'\«E&=b b < \-m.m.W^ti^ ^ cDfi^tC'iJS^c 
li (•7X5'-+— 'bb<H?C5^^7^— ) SrEmb, ^1 

^^Xi7tCX^>A- I D^<&lii!Et»^ibT^iSrtb. 
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[0 0 0 3] 

IE7Sntf-S:K<r^c*e), -T^f i^^'JUBglggisj^yrfB® 

[0 0 0 4] MD (5-5=^^-::^^') (MDfS^ 

T. SCMS(SeriaI Copy Management Systeni)*^*^!^ 
^nrti^. SCMS«. ■r-i$'|f±ffliJ(C*3ViT, :t- 20 
^^i" ^x— ^ t <t t) tC S C M S ffi^Sr^^f' viJ'JK >^ 
7x-X (D I F) 5^-:$'fE®#JtC*5l/i 

[0 0 0 5] :i:^MtCHSCMSm-^ta. 

MSTfcntf-^^jiW^sn-Sntf-^'J- (CO 
py free) cD-r— ^T'abS*^ 1 Sfe'^tn tf-*tffF^tl 
Tlil) (copy once allowed) ^"r$>-575\ STtti 
^ fcf— /&^^±$nTli-5 (copy prohibited) rS'T 30 
^^A^^^tm^T^^, y'-^S'simUziSl^^T. D I 

'f—^tt^\zm9■^n^scMsm^^^m-t^. 

LT> SCMSm-^*?. =ibf-7U— (copy free) i: 

tifcics-T^^xi/tciE^-rso scMsm^ 

ifi. (copy once allowed) tti 

oTViS«^{C«. SCMS«^*nfcf-^ih (copy p 
rohibited) (C^MUT, ^'tifctc, 

tf— ^ih (copy prohibited) ti^CoTt^-S^^tcfi, 
^— 7''r:tx-:5'©ES*ff*3fj:Vi<, c:cDi:^;i5:S CM 

SCMSiCckoT. #f^«^W-r-5^-x^-;i-T^- 

[0 0 0 6] L:^i^U7'cJ*^e., S CMSti±iE«J;e)(ZS 
C M S m#lca-:3'tiTS:^ffliW^ f, W:t-7^^' CD 
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IS« *fm-r-5®*^Bili:;^c-2), ^CT. 0y;tlS. DVD 

^ l»±r ^ i: o T V i -5 o 
[0 0 0 7] n>7^>>;/ . xi7^>y;i.->X7^AT'H, 
DVD-ROM(Read Only MeiDory){c, tf7^:^5=^— 

I W) ffi. ^'f-tr>XS:^tt7tDVDyu— ^'(C-^AetX 

-5 J; •S fc^tf- $ tlfc D V D 7" l^— f (c^fL T 
4-Ae.n-5. f«eoT. 5-1'-fe>X$:§{tfcD VDT'U— 
-\'TfJ. ^^f,nfe+-*fiJffiLT, DVD-ROM{C 
IS^$n7tBf^Yt7^-^'*«^-r-5rtlcj;0, DVD 

[0 0 0 8] ~:f5. 7-1'-fe>X^§ftTt,i;t£t,iDVDy 

WLTl^TSVifeiSi), DVD-ROM!cl5®$tlfeBt#ft 

5^>';/ • ^^'9>:/)l'->X7^A1tfigT«. ^-f ■fe>XB# 
IC $ n -5 ^ # }S L X 1 1 ;S: V i D V D 1^ — V fi . 

■Xf v^^-'l^^'— :S'$ria^b/iDVD-ROM(?5B^^ff 

[0 0 0 9] D VD - R OMT-^ffi^tl 

Tt,i^n>-T->>y • Xi'^>:/;p->X7=-A(S, rL-ific 

[0010] fip-^, ROM^T^^-TfCieaStlAc^^-^ 

'rir>X*§ttfciES;S:^B-Cf?±ni«g/j:. 

[0 0 1 1] -^CT% *mPA«. :5t©i^attii^, 
¥ 1 1 - 2 2 4 4 6 1 ^ii^ 1 0-2 5 3 1 0 

(C © *fS&j^{^ Oi«^ig|»ijiS^^co 7 i7 -fe X *i nj 
*g<i:;iS«fi)c* timbre. 
[0 0 12] C:05:^ffiT-«, IS^jlK^±CD5^-^(i, jgg 

#ilS'm« <h 7 -r -fe > X * § « e: t ic <t 0 » ^ ti ^ 

(vx^-4^-) iCctOHt^^t^ti. 5^-tr>x 
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[0 0 1 3] ^-f -lr>X*S^tTVi/j:lig«tt, !«^^^^ 
[0 0 14] 

-5 V 7. iJ' - IS ^^g§ tC*3 ''^T*jl-efc s 

[0 0 15] bA^L. c©:^rSi-*5t.iT«. ?srSi#*n 

[0 0 16] ±iaPp1S*/8»l-r-5«fi!t<i:UT. *ttlSA 

*e2iT#«.«ifi£*. 5fejr}i^L. rx\zmvf\iimi.x 
*^ e. 05fi^ tCi^STiii ^fiK -r ^ je. JCigjs i: Tit -5 ^ 
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trw^ft^— :/Du/i7 (EKB) ^&mms.^n±ms . 

tciHMU, W?i{b=<^-:/P-:/i^ (EKB) ^^mLfz^ - 
[0 0 17] ±jZliCOl«RKtt, ■ttlgfH©?f^^BtC4-Ae. 

=^-<7:>m^Am±^^x$>tntmmi-ifi\,^, la^l. 

-> 7, T" A fC ^ ® t ;fit o T V i S . 

[0 0 18] *%0^«. ±f5WPp1B,'S^^*-r-5.Ci^ 

05a7^-^'©«J*®'5Illg'ttS:S[M^-B:fc-fe^^ 'J T^-f CO 
[0 0 19] 

[iis&M?*:-r^fe«e)<^#a] *%Bj<om i ®#m«. 

[0 0 2 0] 2^5iaj<ott«E&S««— 

[0 0 2 1] $f>ic. *f|^©^#ESSB«— HJEffi 
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[0 0 2 2] ^^m(Dmmmmmmo-mmm 
[0 0 2 3] ^^Bj^tt^sfa^sgo-nsg^ 

[0 0 2 4] $ *%B^©^^IESl^«CD-^M^, 

[0 0 2 5] :^^m<Dmmmmmm<n-^mm 3o 

(ATS) ?:#jD-r-5h5>X4^-h -XhU-A^jaS 
(ATS) a^itm^nrz\i^±<D/^'try hf)^'bU^y'a 

^fi)tffix-^<hgfrE§«i^^im^ (ATS) s^tj^p 

[0 0 2 6] 2|£5!IB®ftffiiafi^»ll©-|l*gfii 

BfrfB2jtlS:?^?»JS:*fiKL, *^2JiSc5S^JtSJfBBE©i« 
[0 0 2 7] SeiC, 2ls:%i«OttffiE@^g(73— 50 
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^i^St-r -5 ig !Bc f >;/ h ic^Ji))£je) nr^mm iztt^ x 

[0 0 2 8] *%W©^2©#J®«, Efii«{*: 

fcE^:^n/lt»$g^f?^-r^tf5Sll^»B{Ci3t.:>T. E 

frL, mmmmzi^m^nfcmmm^'^m.^m^m^m 
mmn^&m^mt. tuEBt^ms^att, miE 

m.=i>y'>'ym^=^-izm-D'^^x 
mmmm^ e. s^i^^ e. n-s X - ^ ©a^^aa ^ si?f -r ^ 

[0 0 2 9] *^5g©t»^?I^SBco-^SSIi 
«(c*30iT. flfrE«>^M««, E®«K*^«SS})tBtlrE© 
««#:ic*&i&^$n. 1tfccDE^i«^{c*5i.iT^tjl;'d;X5'> 
/•^- I D, *fc«ffl'*OESli»#:l'H*7S:5^'f Xi7 I 
D, :2>^>ymizmU-:>Tm^T^^>7->y I D. 

BfiE«>S«$Sm^«aS^g:«. Efil!«#:*^eSgi^*-5(e.n 

[0 0 3 0] i^^m(Dmmn^&m<D-mmm 

1t!S««$gE^SHng|5d^ ^. 0 BJtg;S:Eti#© 

'^©t&iWMa*fT;ic*5-r, MEi«#®aa5i^gx*ff 

[0 0 3 1] *%Bj(Z)1t#S^|gB©-^]5gffi 

^^ntzmmmmt, ttimmmm±^m\zpqmLrzmn 

=^^-:3feBEfflx-^lcSo'liTMEn>7">'>'«^c^-$ 

-^^P-y^' (EKB) lZj^-z>XMm'^mfJiy=-i$' tl.T 
[0 0 3 2] *%W<^«ffif?*^«<^)-||*Sffi 
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[0 0 3 31 $e.tt. 2^%?a(7)iS^S*^B®— **Sfil 

[0 0 3 4] $ ^>tc, 

(ATS) *{*ip-r-&h7>X3l^-h • 7.hU-A5!lS 

(ATS) ©f*jp$nfcuy.±o/i'i^^y b*^?>'it^^*D 

-rS'ttfrfSSmB^^JWffi (ATS) <&$tJ7'D-y^Tr- 
[0 0 3 5] $etC. *f|B^©+»$gS^^B®— ^^ffi 

[0 0 3 6] *!«I^CD«^f?^gM«— ^Jg^ 

[0 0 3 7] ^ e. (C. :^^m<Dm 3 ©fflWli, f2^i«# 

uy'-^&.^momm^mnv. nimmmz^m-^nrz 

^nm^^ ntzm^m^^^-^f^am 5^- ^ t bx n > 
m':s^^xK.mmmzi&mr^^-i$'<Dmnmm^nn-r 

[0 0 3 8] $etc, *%Bj©{»-SfE^:^*«— 

mmzii&m^n. nwc<Daimmmzii^^x^mri7.i^ > 
/t- 1 D, ^tz\tm^ (Dummmzwi^u'f^ 1 



I ) <mm2 002-84271 

16 

[0 0 3 9] $?>lr. 2|s:%^©«^C©:^ffi©— HJgji 
#«!lS^&lc:teViT®g*-lte.n/tl6S«S^<s6fflb, =1 

^ ntz^mmWit.'^mMmM^u*'' e w^^^st 0 -^m 

10 fiEtS^S'^^^SiW^i&S^fffi^^T, MEBt^MHSPrt 

BJtg i: b it C i: «r #04 i: T ^ o 
[0 0 4 0] $^>fC, *5IW©«^E@*ftO— ^Jgffi 

iiSfcrtlt b;tBt^{t+-^fi£#Bx-:S' tCStJl^TSffE 

^U--7tb. =&^)-l!gSr/-h'<i:bT6-/-b\ 
20 (cH*«=^^-$®«bfc|5iJl>y'J-«it©y-K=^^-* 

-rn74^S^tr=^^-tr J; 13 Bt^{tbfe*^i{t^-:/n -y ^ 
(EKB) lcioTH«rpTtg^tx-5'T«)^;ii:^iRpg![ 

[0 0 4 1] ■^h\z. *%BJcD«5gE®:^fecD— 
<i(3*3ViT. tfiEBt^^t:^-:t^£fflx-5'W. ffi^o^ 
ffiE^SHIC*5V^T*jl7i-7X^'-=^— . ^fcttiRf^® 

30 [ 0 0 4 2 ] $ fc. *%BJ(^)^*^Ee:^^fero— HJgffi 

tbTCDifi:'f^S^*^j*>f*Sf^lt^>nfc«^Ta&i3. WEBS 
^5asx5^-yy«. BfjEE^i«^*<c^-r^Bt^{l:x-^ 

i/itmm\z. ffifflbfcWEBt^{t=^^-*fi£fflx-^'«ittf^ 

#^ ^ E® B#l«:f<S»-^ t b TfltrEE&J««!: {C^^T -5 X 

[0 0 4 3] $ ?>tC. :*:5IBJ©«^ESt:*te®— 
mt::43ViT. «tiE*«ES*Sti. ^(^\z. h5>X3}^ 

40 -r -5^/1 «y hJcSftl^^JtSffi (ATS) ^^JD^-S h 
^>X5l?— h • Xh'J— Aj!lSX5^-y:/^^b, WEBt 

^i!asx7"-y3^«. WEsm^jimffi (ats) (o^m 

^mmt^-iivx-:ra-yi/=¥-^^fS.-r^x^-yy^ 
ttiEE&)«#:<c*f-r-i.ts^x-^<^Bt^«astc*5 

^iT«, iiFEIfSit^i:. S?fEB»^{t=^-:^^fflx-^ 
tBtfESflf^^'m* (ATS) ^-^liSZray^y'-^Sl 

m<oHmmmx'$>^ya -y ^ ->- k <*: sr^tyT^-^ ica 
50 ^f^®i-r-5. 
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[0 04 5] $ 6 ic. :^%m(Dmmm0ty3m<D-mmm 

[0 0 4 6] *f6BJC)^4coffiiJM«, E^»#: 

[0 0 4 7] ^aci. *%0J©W$gS*:^ftcD-||)5S^ 

mmz^m^ti. nik<ommim^\z:^\>^x^m.ts.7.^ > 
1 D, ^fz\t.m^ mimmw^zmmt^j' ^ 7.^ i 

^yryy^^z^U-^xm^-t^uyv^yy \r>. 

-5. 

[0 04 8] ^ ^ IC. ^^i^O-W^S ^:;^fe(D-*]S6ffi 

^ff $ n -5 a > 5^ > «^ ^ -^fiX MS (c: *3 1/ i T ® 
[0 0 4 9] $ *IE§a©«as*;^fe©-SI)!i6Ji 



18 



$^tr+-(rJ:OBt^<tL75:*g5{l:^-:/D.yi7 (EK 

B) \Z^-oX'SMi«lWS.'f—!'XS>^Z.iit:«^WLt-r 
-5. 

[0 0 5 0] $e.lC. ^^IBJCO-R^S^:^)*©— nsg^ 
10 [ 0 0 5 1 ] ^ e, *5lg^©ft««*:^&05-^J6^ 

t vxmmmmmmzi^&mr^7.^'y y^^ts 
[0 0 5 2] :^^m(ommn^y3&(D~mmm 

20 (ATS) ^f^Jp-r-S h^>X3j«- h • X h U-AMa 

^Jt»?E (ATS) (DH1m-^nr:i\&l.±CD/-^^-:; h^^itj. 
^yayi7^-^izttT^mmt^-iiLX-7'ayi7^ 

i'<Dn±mmizi3\,^xit. mss.m^mmt. mmmn^ 

-±fi^^^-i$' tmim^mmmmm (ats) ^^tsy 
ayi7 'f-iS'm^o)mammx$>^ :/d k t * 

-^tSy'-^iz^-z^i^^xmn^—tVXoyy'D -ji;^-^ 
30 [0 0 5 3] *:MHj©tt$6S^:^fecr)— ||5g^ 

W:mz^m■^rlrz'f-■^<Dm.^^m^^rT■r^m.^^m 

t (^mnfiiim^mnvxmmmm(omnmm^mfT 
[0 0 5 4] ^^m(7)^mn^:fjm<D~mmm 

[0 0 5 5] ^?e,tc, *%aj®^5cD#JStt> ■K^^fB 

m.oimimm.mmmwx'$)^x. mn^mj'—ii'CDm.^ 

^ii\z^-ox<D^n±-^mtm^mmLii. wm^^n'S: 
mm bT^^oitgfj:Bt^$aaiiic J: o^^Bit&TSB&^ft 
^y'ry^y^i^mx.tz^ih^i^WLiir^mms.mmmz 

so 
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10 0 5 61 :/^^m<DmwLW.mmi^<D—mmm 

[0 0 5 7] $?>ll. *:%0J«^6c;3ffliJ®«. fH&iK^*: 
f -5) d <t ^ t r -& n 7 A IC -5 . 

[0 0 5 8] $e>«c. *%egro^7rofidffi«. E^^-f*: 

[0 0 5 9] 

[f^ffl] *%ej©«fi£lC*3tiTtt, simmWiz, $>>bt)^ 
tiEglf?^g«i^-Cit<h^tiL S I F*g(c5lg$nTiS5S 

ui^±\zm^mm: Lx^m^ntzy'-^ii^^iz^m. 

-^(Dmmty'is.ni&^'tffofzsfxDm^mi^ ^mm 
m'S:m^-^x±!gi^ti^::.t[zti^rztt). ziy'T-yy^W 
<D-^iEt£.^n^<D«mf)mm\zti. o . -ir^j. g 

[0 0 6 0] *%g«<^^6 43j;Z/^7 05(B1M«C^ 
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20 

SiTHttf ^<«#:T$.^. CD^FD, MO;S: 

'^(Dmm\t.m\zm.'&-^nts.\^, 
[0 0 6 1] z.(D^oufu^^i^^mm^\t. 3>bf 

—9 ' :?^Dy7A*i3>tf3.— ^ • ->;^,5^A{c-i' >x h 
-;i/-r-5::<i:tr<kt3T. :3>tfi-^ • v-X^^AiTtt 

[0 0 6 2] e.J'fl&WBM. !^gt-^*J^«, 

mf<iMmiz^-Dxm>E>*^izu^xs>^^, 

[0 0 6 3] 

20 mmcommcommi [->XT-A«fiX] ^^ib 

a-yi7mX'$>^. E®?I^Sei0 0«, AI±i:'Jl/F 
(Interface) 12 0, MPEG(Moving Picture Experts 
Group)r]— T^ vi^ 1 3 0, A/D, D/An >;'^— 
1 4 1 SrfiSAfcAtB::'? I /FCInterface) 1 4 0. Bf^ 
MS¥&1 5 0, ROM (Read Only Memory) 16 0, 
C PU(Central Processing Unit) 1 7 0, >*^:U 1 8 

0 , ESii#: 195OK7-r:/190, ^e.ich^>x 

h • X h u-A5as#s (Ts^as^g:) 300. 
30 mmmmm^mm^&s oj:>s=s:mv, cn^,«Axii 

[0 0 6 4] Affi:'! I / F 1 2 0 td;, ^^a5*^e>#ti^^$n 
^mm. ^p^> yn^5A^o#a:n>5">"7<&«figr 
■St^^- v^;^«^^S«L-. /N'xi 1 o^izttiirr^i: 

iZliit}T^o MPEGZI— x.yi' 1 3 0«. A'X 1 1 0 
PEG5^=i-KL, Am:b I /F 1 4 Olcm^bT^tt 

hiz, AtB:^ I /F 1 4 036^e.«)^$n-5x'<-5?^';i'm 

40 ■^^MPEGX>n— HLT/'?X 1 1 0±{CtB:^"r-5o 
Aati:'3 I /F 1 4 0 A/D, D/Ar]>A'— ^14 

1 AttJ;^ I /F 1 4 Otl, ^l-gPTS^^tt 

/D, D/AZi>/^— 3^ 1 4 lTA/D(Analog Digita 
l)'^^-r-5^<»:T-, 5=^^- >'^';i/«^i:LT, MPEGn 
—y'-y^ 1 3 OlZliiijT^tLhiZ, MPEGa— xy 
^ 1 3 Od^e.OT^-f i7iS^;i/«^Sr, A/D, D/A3> 
A— :^ 1 4 1 T'D/'A(Digital Analog)S^-r-5 ^ t 

50 [0 0 6 5] mnmm^^i s o«, i^^-y:/ 
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OLS I (Large Scale IntegratedCircui t)Tl#fi)tS 

- H -i? X T ^u^^f^'^tz.m^\z^^ xmrnr^ - 1 =fo 
pj«gT-fc*. y7 h-^^xT^fiici^iJc^^iaa^atbTw 

[0 0 6 6] ROMl 6 on. m^^t^ ffi&W^SB^ 

=^-T-*-5y-H=lr-*faii:bTVi^. CPU17 0 
tt, ;/^:'J 1 8 0lCfE1gStlfc>^Di^^A$r^ff-rs;i 
tT', MPEG=i-7'-yi7 1 3 O-^Bt^mS^Sl 5 0 
^^PlWf^o ^^'J 1 8 0«, F'JAtt'. 
UT-, CPU 1 7 075^*fft-«):/P^^A^. CPUl 
7 0 CDKjf^iiJJBTSCT^— ^ «:fEHtf \i^-izri9 0 
^IBMiB^BJtg^ifH^i*^ 1 9 5 * 

Di^'^A^ROMl 6 OtC, ^A'-f X+-^y.^:U 1 8 
0 iClEtfe-r S i LT J; Vi. 

[0 0 6 71 fafil«#:l 9 5ti. |fiJA«VDVD, CD 

H^-f^l 9 OlC*fbT«fl5i^tg?'ct1«)5XT5.-5<tt-^o 
fiL> IH^^^l 9 ESS^SBl 0 Olcrtli-r 

[0 0 6 81 h7>7.#-h • XhU-AmS¥g: (T 
Smm^m 3 0 0«. ^at'fe^^TEiej^TSrffl^^T 

#aBixi»0j-r-5>*^\ -^jxtftt^cDTvya^^A (=!> 
mmmi^i 9 5 tci§«ftT^fe«6<^7^-^®a*5=k^- 

[0 0 6 9] h7>XJ)^-hXh'J-At:i«, &h7> 
hWWSiS^-f 5 >^t»ffi<t UT® AT S 

(Arrival Time Stamp : «mi^»JX^ 
T*3 0. C©^-<5>^«MPEG2->X7^AXTM^ 
^nTt'i-g>iS[3BM?icx3-^T-$)^T - S TDdranspo 
rt stream System Target Decoder)S:ffl[^$-e-^CV5 



ATSlC<toTmiK3'^5>i5''€:SiJP-r*. h^^X^l^ 
-h • 7.h'J-A«lS^& (TSmS^g:) 3 0 0«> 

'j-A^a^s (Tsma^©) soo^, dvd^© 

/^^y h<DXtl^-< 3.>if^mTAT S (ArrivalTime 
Stamp : *«B#^J7.^>:/) ^nUal^XUm-T^. 

[0 0 7 01 *:%?BOfa^mgB 1 0 Ott, ±m(DA 
T s ®#Jn:^ nfc h 5- >X4^- I- X h U - A ir i T« 

fig$n?.3>5=->-;^('^v^T> Bt^ma^© 1 5 0 {ci3 
viTBt^it^aa^iiff u. Bt^{t®a®^c^nfczi>7^ 

a 1 5 0 i5gi«# 19 5 izmm-^tirzmmt.:3 >^ 
[0 0 7 11 s^i»ffi«#ma¥g: 5 0 0 mMi^ 

ID. 7^^Xi7«tcSJ^tt3TK^$n^5^'<'Xi7 I D. 

30 [0 0 7 2] m^mmm^mm^m: 5 0 0 ESii«^ 
1 9 5(i^)w^nfc»««#a^tt*5i0«#b, 
fc56&«fif^*i*^Ma^g: 1 5 otcteit-r^o m^mm 

7->ym^^ n^mzmmr^v^ni&nm^^^-t^o 
m^mm-un^m^^s 0 oiifeviTtt#^nfc*g?Et» 

oDi^irt^a^fT/i^^-r. Bt^ma^ai 5oi*iT*fT$ 

[0 0 7 31 fi4o. m 1 (zs^-rnt^^aa^S: 1 5 0 . t 
s^a^as 0 0. K>««^«^Ma#&5 0 oii. a 

^ta^g&nff-rs 1 ^sfcttiasccDL s 1 1 uxitj^b 

[0 0 7 4] :ip.^m<num<M^^M(nm^mthx\im 
50 \z7n-rum.n^^M 200 t'«. fE^<«^^ 2 0 5 « k 7 



( 
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^zfmmtLX(Dms^mi^^>^y:^-:^ (i/f) 2 

pl i^cC « ^ t U /c t) O T $) ^ o 

[0 0 7 5] iy'-t^mm9&mi^^Tj^y'-^n^9!i^m'] 

3 (A) coya—^^r-h\zl.rz'^^r:>rzmW^9!^M^^fftD 

a>^>y) tJi^ «?iJA^^. lEEEdnstitule of Electric 

al and Electronics Engineers) 1 394>^ U T^l^AX^* 

S 3 0 1 (c;fel.^T, AtH:^ I/F 1 2 Oti. #tf^^n-& 

[0 0 7 6] TSiaa#S3 0 0ti> X-T-^^^-^^S 3 0 2 

^^^LT, A'Xl 1 OSr^M^T. BS-^^fflS^© 1 5 0 
[0 0 7 7] BS^^^aS¥^Sl 5 Oti, T.'r-j^S 3 0 3 

^, AX 1 1 o^^rUT. :7'i 9 0. fe^i/^tiie 

I /F 2 1 0 lctH:^T'So Pir-^it::^ >5=->U/^i. 
K^-ryi9 0, fe^V^^ifB®4K<$ I /F 2 1 o^:;Mx 
TfB@^^#:i 9 5{Cf2^ (S 3 0 4) 

[0 0 7 8] IEEE1394i>UTJW\*X^^rbX^S^ 
#(0. >^^J^:3>^>^>^«M-r'5)fc^?)^^)^^^U 
-:3T. 5 CDT CP (Five Company Digital Transmissi 
on Content Protection) (JWT. iSl[> DTCP^hO^ 

lC*5l^T. ^(7)0g^{t$n;^c5^^ >^^;i/=l>^>*y (Pgr 

[0 0 7 9] C(DDTCP\zm^\Z&-:}<y'-^mSim 
\Z^l^T\t. y'-^^mmcOXltitl I /F 1 2 Oti. X 
"T^yS 3 0 1 IEEE1394->U TJl'/N'X ^^TLTBt"^ 
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[0 0 8 0] DTCPtCJ:^^-!' v5^JI/=i>'T->:y<^ff&i 
Bt-^ftfCffll^fc^-^^^T. IEEE1394S/'J T;W\*X± 
[0 0 8 1] 7S:*5, DTCP(CJ:n«. lESStC^S. 

'T>y\z^^n^^-(D^mm^. ^tso. ^(^Bt^it 

zjyryyt^^^^ti^o fiu, dCTti. B&-^{t=i> 
^>^>ii, ^(D'^^frrorz^(D^-ti^'^'^nx^^^^t: 

c^^t-SJc^A^t^fDch-r^o z.:zx\ T>TCP\zr:)\^^x 
20 ^«J;^ti. http://www:dtcp.coiD<DURL(Uniform Resou 
rce Locator)T#S$n^We b^— >^{C:feO^X. ^> 
:7:t i>3 >^3 Xlnformational Version) 

[0 0 8 2] ^1^SR;&^e>OT'*-P^(i'^<^=3>5=-> 

03 (B) (Dyu-^^-V\z'<!t'DXmm^^o Ti-u 
^m^<Dzi>^>y {7i-aif:3>^>y) Xltiti 
l/F 1 4 OlcttJ^$n^<h. Attl;^ I/F 1 4 oti, 
XT^-y^S 3 2 1 {c^i/^T, -^c7)T':hn^n>-T->U/^ 
30 ^mU. XT^^y^S 3 2 2iCjt^, F^l^-r^A/D, D 
/A=l>/\*-5^ 1 4 lXA/D^JftUT> ^^z^^Jl^m 

^(Duy^yy {'f^i^i^)Vzi>^>y) ^T^o 

[0 0 8 3] Z.(0'r^zydi^JlZ2>'fyy\t. MPEGn 
—y^y^ 1 3 OiiZm^'^tl. X^ T'S 3 2 3 lC*3Vi 
T, MPEGX>=i-K. rUt^-^UPEC&miZ^^ 

i^mtt&m^^^ff^n. a*xi i o^in-i^x. f^nmm 

^^1 5 o\zmft^^ti^o 

[0 0 8 4] i^T. 7.y^yyS S324. S325. S 
3 2 6lC:fel.^T, mS (A) (^)X5=-^y y S 3 0 2 , S3 

Tsjas^gs 0 0 (Cct^ h^>x5i^- h/i^^y Mc*r 
-r^ATsmw^ ff&^fias^si 5 oic*>frt^Bg^{t«a 

lEsa^^i 9 5\zmmi.x. mm^mm^f^TT^o 

[0 0 8 5] :*(c. mmmi^i 9 5{::iE^$n;^c=i>5^ 
a^zj y^yytLXihii-r^f&Mlz-Di^^xmACDya 

-{zvt-oxmm-r^o i^i^)i:3>^>y^Lx9v^ 
izmti'T^i&m^tmA (a) coyu-^-^r—hizLr^^^ 

50 t?rcl?^SaS<i:LTlllT$n'2>o gp*^, ^^mmz. X 
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t-Vt'S 4 0 1 {Ci3liT> H5--f 7"! 9 0 S;fe:«IH®i* 
<*:'l/F2 1 Olca;oT. SEfiH««^ 1 9 5 ICfHS^nfc 

[0 0 8 6] Bt^^aa^isi 5 o-e«. X7--;/:^s 4 0 

2tC*3tiT, H^'f:/! 9 0Sfc«E®i«#I/'F2 1 

075i^,ttiSi&2n^Ht^{t=i>^>':/*^«^^s^^' « 

1 1 O^^LT, TS^aa^SS 0 OIC 
[0 0 8 7] TSiffla^g:3 0 0«, X7^-;/ys 4 0 3 10 

>X#-h/^^r.y h®ATS75^e.tll;^5''r 5>^^*'J^ 
ATSiCJ$;Dfc$iW**fTbT, A-Xl 1 0«:i^M^ 
Xmtl I /F 1 2 0 tC'*iii&-r-5o At±l:^l I /F 1 2 

Oit. T SMa^SB 0 OTi-'^W-ri' i/^-'l^^ >7^>^>' 

[0 0 8 8] f=C*5, X\ii:h I /F 1 2 0«, X-5">y:^S 
4 0 4T, IEEE1394vUT;W'^X*^LTx-i- S^iS'Jl'^ 20 

[0 0 8 9] mmmi^i 9 5(cfa®$nfc3>7->>>'<£ 

-&f'*5l/iT«, 04 (B) (D7P-^^— htCt^-^fcS 

[0 0 9 0] fip-^. X7^<y:/S4 2 1, S4 2 2, S4 
2 3tr*DtiT. 04 (A) <^)X5^-y 4 0 1 , S4 0 
2 . S 4 0 3 (cfett-&«^<!:^n-eniBl«l®«aS75^fT*5 

n, ^nicio, Bt^sas^si 5 o{c*3v^T?#e.nfc 

T. MPEGa-x-yi^ 1 3 0{C^«i&:Sn^. 
[0 0 9 1] MPEG:3— x-yi' 1 3 OT-tt, T.T'-jZr 
S4 2 4{c43ViT. x^'>'^;i/n>5^>'y*iMPEG7- 

4 Ott#^«i&$n^, Al±5:'3 I /F 1 4 0«. XT^-y^S 
4 2 4{C*3liT. MPEG:3-xyi7 1 3 OTMPEG 

D, D/An>A*-^ 1 4 ITD/ASi^ (S 4 2 5) 

A2&\zm^^ AtH:'! I /F 1 4 0«, -^-WTr^D^/n 

[0 0 9 2] [•x-^'^^-v-v h] 0 5Sfflv^ 

# :7a (b 1 ock) t ^ BfITO?^<« 1 
:fD-yi7H, 1 9 2 *X (X-yi'X) A'-f h («ajA«X 
= 3 2) (Diz.^^Lti-:>X\'^^. 
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[0 0 9 3] MPEG2 0TS (h7>:^ 

. /-^^r-;/ h (18 B/N'-l* H) tCAT 

S^mnbT 1 9 2/N''f b^ibT, ^nSrX^^J^Tl 
:/D>;/i7«7^— ^'tbTV^-S. ATS«2 47I>M3 2 If 
<y hC5gF«^^J*5^t"5^-^'^^'3, ^{-'bltt^BbfeJ; 
C)(CArrival Time Stamp {mmnn7.i> yf) CDHgT'S) 

og.^.x-^'ibT^fiX^n^, lE®j«{*«)t^i:o©:/ 

D«yi7 (■fei'^) ATSi&#JPbfcTS (h7> 

:/D-yi7 0[)^lSSOTSA^r';/ MlMJUn^tlfcAT S 
[0 0 9 4] 7>^Att©a&^ATS<£fflt,iXBt-^{tffl 

AT S Srffl ViXy P ^ - 

[0 0 9 5]f<t*5< H 5 ir7K-r:7'P -y i7 • h* (Bloc 
k Seed) «. ATS^^tJ^APit^Xab-S. T'd-;/^'- 
(j;^ $ e, (CAT S 1t\rf^ts.< a e— ftiJffllttF^(C 
CI : Copy Control Information)'b'f'tJDbfe1#fi£i: b 

[0 0 9 6] 7S:*5, :/n<yi7 . ->— 

^ntf— ^JStt^(CC I : Copy Control Information) 
«. ?*aT-Si0^-r^:^)^*- jfe«5tt®*I^Ji^i:bT0 5 
CDTCP (Digital Transmission Content Protectio 
n) ->XT-ATtii6-r-&3tf— SfliWW^ (CCl :Copy 
Control Information) TfeO. xAW 7.CDtg;'3tC^bb 
2 aigcOltlS- -TTSt?"^. EMI (Encyrpt ion Mode 
Indicator). S-StMS. P t'-SSJtiftt^Srjll^/::*©* 

#g (CCD X^SSis4>)i*C C I (Embedded CCl) CO 
(,iTtl75^®t»^t:S;B*bfct)©t7S-S. 

[0 0 9 7] /j:*5. :»f.^m(r>mmzii\,^-x:\-t. dvd^ 

gR^j'Wx-iJ'WFt^it^n^;^^'. gl 5 <D*TaiC*-r J: 
6) A-f h«BS-^<t^tlTtC¥5C (Unencrypted data) 

rossiagi^n. wt^-^' (m+ 1 A-^f hi^K) 
Bt^^tsn-s. c:niii«^5aa75^'8/\w hw<hbx« 

50 Sa31X$)'5feJe>JCB&#J!aii-7'— ^'S (Encrypted data) 
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8A-f hm&'^ti.K. tztx^iin-^ hW'^^nt^TL^ 

[0 0 9 8] [TS«aa^©t3:fett^MS] CLCT. A 

[0 0 9 9] -rt^t)^. m^^-m-W^o^Tvyu^^pL. lo 

BjT^JiP^PiT^n^ (117 (a) #M) o h^>X5j^-h 

->X5^AX (ISO/IEC 13818-1) 

$ nx V ^ -5 {5^. M X 13 — ^^^'■r ^ ^ T - S T D (T r an s po 

rt stream System Target Decoder) it 3^j:V^ 20 

[0 10 0] h^>X7!^-'hXhU-A<7)?|^B#{Cti. 

TAT S ^^1-^0 UTlE^T^o 
[0 1 0 1] B16{C. v^>/K>^:7x-X«SX 3C 

¥S3 0 O{c4oV^T^Iff"r^«!LS^itt0>fl"r'5:/D^y^gl 
^*t*o 0 0;!i^^>^i. >^5';L'*^ill^<^'x^ >^ 

01*^cJil|2lC*5V^T«, Am:^I/F12 0S: 
^rUT, $)^l^tiA[±l:^ I /F 1 4 0, MPEGa— 
'y ^ 1 3 0 ^^MxTiffi^ 6 0 OT&^e h^>X#— hX h 
'J-A>O^A:^$tl^o 

[0 10 2] h^>X3}^-hX h'J-Ati. e^yhXh 4( 
U-A/'^-lt- (parser) 6 0 2 fCA:^$n^o \zy hX 
h U — A/1— 1t— 6 0 2 ti, Xil h ^ >X:}^— h X h U 
— AC04i75^?) P C R(Prograni Clock Reference)/1^r -/ 
h^<^U3-r-5o CdT. PCR/I^r^y MPEG 
2 v-X^AXT^^StlTl.^^ P cR-h^nmt^nTi^^ 
^n^-jV^$>^o PGRA^^yhti. 10 0msec 

X#-h/1^r^y h7&^Sm{ffl(::i'J«-r^NFS'JS:2 7 MHz 

[0103] ^LT. 2 7MHz PLL 6 0 3lC43V:i 5i 
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T. flaSS^Sd^Jt-::? 2 7 MH zi7D-yi7€:h^ >X3j^' 
— hX hU— A(^PCR(CP^y ^7 (Lock) ^-tt^o ^-T. 
AXi$'>:/%*lHlS&6 0 4ti, 2 7Unz^U-j^<D^ , 

u -J ^ (DtiO y vm\zm^^^fz^ ^ i>.7s9 yf^^^-r 

-eUT. :/a'y^ • K (Block seed) #JDIh1B& 

6 0 5ti. h^>X#-h/1^r^y h(^^lA*^ h@*^*X 

A->?>^*A*'7:7r 6 0 6^A:^^n^B#(^i$^-< AX^ 

>y^ATS(hbT. ^(7) h^>X7j^— h/^^u/ htC^ 

[0 104] ATSti^lB'^tltzV'yyT.'m-hn'r-j 
V\t. XA->^>^/N*^y:77 6 0 e^iloT, 5ffi^6 0 

7 7i^^e. rtr-^^aa^ai 5 otcai:^$n. ^a-eitt^-r 

^l«^«!iS?&^*fT$nfc^. H^-f>^19 0 (0 1), 
fH©j«frI/F2 10 (S2) ^^bTX hl^— S^^^-x 
^ TT*^fE®4K'(* 19 5 {ClH^^n^o 
[0105] 07ti, A:^? h^>X3l?-hX hU— A;0^ 

fH®l«f*:t-fE®$n^^cDiasco«?ys:*-ro 0 7 (a) 
\t. *^4^syni^^A (:3>5^>^7) ^«;S:-r^h^ 
>X#- h/N^^^y hOA:^€:*-ro c;iT'«lttti> Xh 
U-A±a)^^J$:^T^ratt'e$>^o h^> 
X5i^- h/^^^y I-<^A;^t5:, 117 (a) {;i^-r J: -5 

[0 1 0 6] El 7 (b) -/a^^ • y— H (Block 
Seed) i^lim^e 0 SCOmtt^^T. ZfU y^ • H 
(Block Seed) mm^e 0 h^>X#~h/t^ 

^y -ec?:)/i^^y hCOX h u— A±cos#^j^^-rA 

TS^$t^yp^yi7 — F (Block Seed) Srf^JDb 
T, y-X/1^r*y h<£:ai;^'r^c 0 7 (c) \tm^i^f^ 

I ti. 0 7 (c) izTjkfj^^izmm^m^xmmmmzm 
[0107] El 8 fi. mmmi^ i 9 5 {zmm-^ntz h ^ 

>X5j^- hX h U-ASrW^T^Jg^OT S^aiS^SS 
0 Oco^2lSifiifi£3^D'y^a^^LTl.^^o 0 07^^ 

-H (Block seed) ^i^gtlUS^ 8 0 1 -\A:^^n. ATS 
} ^(HlK 8 0 4 ti. S^g§;^^^}#^ 27MHz^D'y^80 

5 (7)/7 D ^y i7 *f ryy^^mizm^^^fz^m^ifw-r^o 
[0 10 8] tj^io. n±(^mihmz:h\^^x. —mmv]<D 
ATSf)^V}mmt\.T. ^yif^^mms 0 4\Z'\i 

i!)^m\^<t^'Dtzm. m^m^im^so2\tt. ^(oh^y 

X#— h/^^y h^MP EGI3— 5^^y ^7 13 0 ^fzkty" 
^ iy^)\^Xlhf) I / F 1 2 O^ltifl-^^o 

0 [0 1 0 9] S9ii, xti Av m^^Bimn^^ i o o 
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ODMPEGa-x-yi^ 1 3 0{C*5t,>TMPEGX>3- 
h'LT, $eiCTS«aS^g;3 0 0(C*5V^Th7>X# 

Hl^fctt, 02*3lt^MPEGn-7^^yi7 l 3 0 

^BTS)^. 9 0 \dv'^mm^Kti^n 

[0 110] MPEGt*x:^X>a-y9 0 2 A;^ 
t'7^:t«^^MPEGb-x:^Xh-J-AtC?^^<tl-' ^ 1° 

n=£/^ 7 T biT^'i-^ I- U - A/^ >y 7 r 9 0 3 ^tB^T 

MPEGt*7^^X>a-^9 0 2«, MPE 
Gfx^XhU-AtC^t/^T©T^-t7.^->y bWISS: 

t^^^^^^yii, I/P/Blfi'^^' (picture) 
WaiTfe^. 5^3-H^"f AXiS'>^tt> MPE 

G2->X7^AXT^^$nTVi^«ffiT&2.._ ^ 20 
[0 111] jffi^9 0 475^e>li. :t— T^'f ^ft^*^A:^ 
$nT:feO, ■5-n«MPEG:^-5=''<'^X>'n-y9 0 
5^A;^l$n-5o MPEG^-X^*X>n-^9 0 5 
tt« A;^l^-X'<*^I^^MPEG^-X'f *Xh'J- 

At'?^^-ftb. ^n&A'y-^r 9 0 6^til:^-r^o * 

fc. MPEG^-T^-f^X^n-^^Q 0 MPEG 



[0 114] n^r-y Yn^{tmm'^mffi^--7' ^ ^f-^^r 

XhU-A/^-y-7r 9 0 6 A^6m5^Sn/c:'<-< D- 

h/l'ir-y hW^{t:l§9 0 9'vX:^$*T-^» 
[0 115] /"^'ir-y h^^{mnmmii)^'P CRnT y V 

h^>X7l^-h/^^r.y h^$^{tg|9 0 9li, # 
a^tx^rv^a-^g 0 8 75^eA:'3^n^PCR^5iOjA 

yy^yf^^Yntry h«F^^tS9 0 9-^li<BIfeA;^^n;^t 



[0 112] #a'fl:X'b-->*i-79 0 8lCtt. fx^t 
^_^^^a)7/7-fexn.--y ht»|gA^A;^$ni.. 
■ftX^rv^-7 9 0 8li. 7^-kX^--> htt^tcSo' 

^,.;;^^,;;^_5 9 0 8«« rtgPlC2 7MHz«SO»2^ 
il#SiJ^^^-r-5i7D-yi7^^-&. ^bX, MPEG2T' 

tlTV^«.(S«El«)fJ:xn-^^ ^^WT'feS T -ST 40 

m.\%^ /^^.y h^t-rsxhu-Awastxh'j-A© 

[0 113] /1-lr-y h??^{l:*J1»«^*^fx^/1ir.y h 
CD«-&. X<-y^9 7 6«affl'Jtc;riO. k'T^^XH'J- 
AA-y7r 9 0 Z1P^>^TV V^^KcUn>m.\^^'0^ 

n K7>X5}^-h/'«^-y^^^^<tSg9 0 9'^A:»3$n 

50 

■5. 



[0 116] h7>X#-h/-^^r-yh«=#<tgg9 0 9 

tt, /-^•^r-y h??#^t^Wtt«:*V1^r-y h b^cV^ 
ci^mS^-r^^^. h7 >X#-h/tdr.y h^l±J;^L. 

ViTh7>X#-h/'^^^^:' 1-*^^^^ tH^bf^. bfc 

i^MtCh5>X4?-h/'^^'> fJ* ^"i 

val) ^-r AX5'>^ (time stamp) t1-»^S9 1 0 
li, ^fi-ftx-iri^i— ^ 9 0 875^e.A;'3$n^PCR!C 

[0 117] ^m\L7.Ti>o.--7'dQ 8*^e.A:^i$n^ 
PCR«. MPEG2-r^^^nSh5'>X#-h>''^'!r 
-y V(D 1 0A-< h@CDS«#J--Oi'J«f^^i^^"^<^'^' 

[0 118] ya-yi^ • H (Block Seed) ftJPlilK 
9 11«, h7>X3}^-h/^^^-v h?^^^t§§9 0 9*^5, 
t±i:bSn-2.h7>X#-hA^r.y htcATS&{4JlD-r 
yp-yi7 • (Block seed) f^ialHlES9 1 1 

XA-v>^A--y7T9 1 2<£ffioT. Ht^^fflS^Sl 

[0119] E®«# 1 9 5 -^^m^ A T s 

h 7 >X#- h A^ H B&^^aS^S 1 5 0 TBt^ 

{t$n^wic0 7 (c) tc^t-j:^trmiis*K«?)^^«ffi 
TA^^n, aafii«£#i 9 5i'^«rt^n^. h 

•y hoS««'^(OA:^)B#^J^S'J'#t-?.-<!:7i^T^^o 
[0 12 0] i:Cl^T\ ATS®:*C-^$i*3 2 t'>y hi- 
j*^oTV^S*5ttT«fi<. 2 4t'<y hTi^S 1 k'-y h 
T-=b«*5fcCt^o ATSWf-y hfiA^'fiV^ai-. ATSW 

TSj&^'2 7MHz»ffi©A< :h'J-*'?>^'-'^S>-&« 
^. 2 4-bi t«®ATS*<-STS^W«^ 
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b;i£7!>^e.. +^i-Ja:jS%«SraT, ATS*24-bi tJJt 
[0 12 1] dOct'pIC, ATSCDt'-y hS$r1ll''?!^tfi 

•^ayi7 • HC9fiifiX^J$:0 1 0 Ic^f. El 1 0 (Z)^J 10 
l\t. AT S ^ 3 2 b*-:/ h5i-<^ffl-r^^JT$)^o 0 1 0 
<0M2it. ATS^3 0 t*<;/ h<!:L, 3 tf- Wlt^ 

(CCD ^2\dyh^mm-r^m-^isc>^o znf-mmm 

"ftt^TfeO, SCMS : Serial Copy Management Sys 
tem-^CGMS : Copy Generation Management Systemd'^ 

t^Ti^-rrJt:— 7'J— (Copy Free) , Iffif^cD^Oa tf 
— <£:WF"5It"^11fi:'R;:3 tf— fFoJ (One Generation Copy A 20 
llowed) , a tf— i&ggJ^J^tVi^i tf— ^ih (Copy Prohibi 
ted) f=ct*(DiS$S*^*«*5. 
[0122] 010 iZ^-rm 3 tt. AT S 2 4 t'-i/ h 
tb, CC I ^2 t*-i' hfi^fflb, :^ e.lCfiC0«?gS:6t:' 

^(DZl\£-mmmm-r:^^-^^o\:ii>3 > (Macrovislo 
n) >/:t7 (On/Off) ^yR-rmWiUii. m'^ti.m 

[0 12 3] [=t--BH{i«)5X<hbT<7?>;/U- (*) Itit 30 

01 lit. ^^^SlSrfflV^^tiagii/ 
Tfe-S. 01 1 WST&^C*-r:^>>'^•0~l Sd^ffl-ir^) 

iESis^^eT-$)^o -r;ic^o*.0i iic^-r* (u/u 

-) «jt«^*('J-7 : leaf)*i-?-tl^'ncDE®S^S 

[0 12 4] SxA-i'xo~i isis^ (.mmv^) 40 

#T«iSS-r-5. 0 1 1 «)fiT&Jcs^-rK 0 0 0 o~K 1 
1 1 1 d^s^^/N'-f X 0 ~ 1 5 (c^-ti^*nfij 0 ST ^.n/c 
ft±©®KR7&'>?). «Te*^e)2# 

B(;5ii5 (y- h*) iCfgttSnit^- : KR~K 1 1 1 * 

[0 12 5] 01 uc55-r'j/'j-«BXic*5i.^T. m^i-£ 

T'A-fXOlSU-^^^-KO 0 0 0<!:. y-H^- : K 50 
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000, KOO. KO. KRS:B^*■r-5. 5^/N*-fX5«" 
KOIOI. KOlO, KOI, KO. KR^Wr^-T . 
So xA*-r X15tt. K1111,K111,K11, . 

Ki. KR^mw-r'S. i^£*5, 01 l®>;/u-^c^ST'A' 
'fX7J^o~l 5©1 6e©i5»-fB®Sn. U/'J— «ljfi'b4 

$e,(c^<«5='A'<X7&^*>;/'J-4^lc:«fiK$ti, i 

[0 12 6] sfc. 0 1 1 w-yj-^jstc^^n-s^is 
mn±^iz\t. m^^r^^^mi^^ m^itDvu. cd, 

MD, ^^rUXT^-C •yi' (SIS) ^S:<5effl-rS«l>!?«tjSP' 

'J ^-'^3 >-*)■- a 7.-^m^T^:it-/im^^rL^. ^ 
»j;e>i^£fti^c-£>xA*'rx. mf^^7y^)^-->3><r)^ 

■5. 

[0 12 7] ;inG.(^^^?'i-x>'N*'f X. TT^'J^r — ->3 

>^t^^-rs->x-xAtc*3UiT, m^i^mi KDi^m-v 

ffl^fc'gP^}-, -rJ^ctj^T^A'-rxO. 1. 2. SSrl^— O 

cicD,-^igs-trH/ufci/;u-:/rtic-arsns^A-i'x 
^D/N'-r^^d^ejUf^b^to. #taicffiffl-r€)vx^'-^ 

— ^MMb/^iO. $)'&Vi«€-T'>'N*l'X7:)^e.ynA'-i':$'*$) 

Xi:®a'-^'jai§ftStT7'J^SIII«> 01 KD.'^MX-m 
/vtm^^ -r^Ct^-feT^Al-XO, 1, 2, 3*l:P©d/ 

^, c:Ock57ii/;u-y«, 0 1 i ©-y u-fftc^Sc* 
[0 12 8] fct*3. $>^i 

tbTfeiv^. cine.©/— H^-, 
s. 

[0 12 9] CO>>"J-«jtlC*5^^T, 0 1 l*^e>?«6. 

*^jJtJ;^lc. looi^JU— 3^Jc^sn-5 3::>cD7'A'f X 
0, 1, 2, 3«y- H+-i:bTttjlO=^-K 0 0. 
KO. KR^fiS*f-5. C«y-H^-#tW«ifi&^fiJffl 
T-S)C:i{-J:0. 0iJ^«^^jlcO-7X^'-^— ^TT^/N'-f X 
0. 1. 2, 3 05*-lC»#fr2>;:t*<"IllBi:'i^. i'S:^ 
*jll::fiS^-r«.y-H^-KO 0e#:^&■7X^- 
^-<i:bTS^-rn^^. mrzummn^mn-r^:itu 

<7'A*'fX0. 1, 2, 3 0)^i)^^m<D-7:^^—^—<D 
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Sfc, grfc;S-77>^'-^-Kmaster 
^y_l*:^_KO OTBt^^tbfcfilEn c (KOO, K 

master) h 9-^:7 ^cfT bT*^V^ttfa^«i* t' 

l^ifrtUTxA'-rxo, 1,2. 3{CE*t-tlli. 
7>0, 1, 2, 3©*-*^*, ^n^etKDy'/U 7.\Z:td\f^T 
•fiJ*-r-&*W/— H=^^-KO 0*ffll/iTB&-^En c (K 
0 0, Kmaster) ^^i/iT-VX:?'-:^— : Kmaster^ft 
^dt^^'nJtgtT'ct^o !^i:*3. Enc (Ka, Kb)^liK 

[0 13 01 Sfc. fe?)l^.^t tC:j3V^T, xA-f 7. 3 <0 10 
fiJr^-r?)!! :K0011,K001,KOO,KO,KR75t 

->7.T-A (xA*-f7.0, 1. 

(C, xA*-rX3^->X5^A/0^?.^'9gt-r!2->^/i^*S)^« ^ 
©fcJeXCtS. y-H^- : KO 0 l.KO 0,KO,KR 

^^n^nrnftumK (t) ooi.k (t) oo.k 

(t) O.K (t) RirMffb. 7^/NWXO, 1, 2iC 
JE-c7)S«f=*— ^■e^^<^^-S*^*^-5>. K (t) a 

a aH. UK a a aCD^R (Generation) : t COMff^ 

[0 13 1] SfT+-C0fia*^S'^''^"^85^^'^'2>'> 

roMST«, 012 (A) irs^-rwSi^t^— :/D 

-v^ (EKB : Enabling Key Block) tWitl^yD'y 
■7-^7, $,^t,i«f5®«#tC*&ttbTx/N*<X0, 1, 

[0 1 3 2] Ell 2 (A) \z^-rmi^it=^—^°'yi^ 

(EKB) tCtS, y-H^-<75Sffc^'-5B7^<f^A'^^<^ 

«fiK$n^. SI 2W01JIS, 01 1 (cs^-r':^'J-«ijtf 

<D7=^AWX0, 1, 2lC43ViT, Iftf^ t W5S«f / - H ^ 

- =£gH*-r ^ - i * e M <t LTjgfiK ^ nfe 57 5^- 

A-fXUi. Hffy-H^-i:bTK (t) 0 0. K 
(t) 0. K (t) R35^'^5T*0, xA^X2tt; S 

^y_^jdt._i:bTK (t) 001, K (t) 00, K 
(t) 0, K (t) RTi^iiJgT^-a. 
(0 1 3 3] 01 2 (A) CDEKBt;iS^$n^J:^l-E 

KBtc«it^roiit^{t=^-*^^*n^. ftTawBt^^i: 

E n c (K 0 0 1 0 . K ( t ) 0 0 1 ) T-fe 
;inttx/N*'f7>2CD»OU-7^-K0 0 1 otcJ; 
oTBt#{l:^nfcS«r/-H=<--K (t) 00 1-cfe 

K (t) 0 0 1 $:#^Ci:75^T-# 
;g>o ffi^lCJ:Ot#;tK (t) OOlSrfflV^T, 0 

12 (A) 09T*^^.2g:B®Bt#<l:^-En c (K 

(t) 0 0 1. K (t) 0 0) ^'iK^-^mtfiK! , 

y_H=^^-K (t) 0 0*#-2.-i:A^T?^^<. i^THM 
012 (A) <D±>6^6 2SgCDSi^{l:4^-E n c 
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(K (t) 0 0. K (t) 0) «r^#L, M«fy-K=^^ 
— K (t) 0, 012 (A) (D±-d^<blWcm(DVS^it=^ 
-Enc (K (t) 0, K (t) R) S«^UK (t) 
R*#So xA-fT-O. 1«, /-H=^-K0 0 

0HH«f-r«.^ct*t-'^^*^T43 6-r, Hfr/-H^-t 
UTi£2^S^!:®«, K (t) 00. K (t) 0, K (t) 
RTS.^. XAM7.0. 1«. 012 (A) OJi*^e.3 
glBCOBS^it^^-E n c (KOOO, K (t) 00) ^ 
^^VK ( t ) 0 0. *1SI»U. JJiT. 012 (A) © 
±ii^'b2^S<Dmm\:^-En c (K (t) 0 0, K 
(t) 0) M«ry-b*=<^-K (t) 0. 01 

2 (A) CD±*^e. lSewBt#{t=*^-En c (K (t ) 
0, K (t) R) S:«-^bK (t) R*t#So 
tcLT. ^AMXO, 1, 2«MSrb;ftliK (t) R«r 
#^Ci:*^-e^^o 012 (A) 0'f>-7^-v5'X 

[01341011 (CS^f U -«jSro±ficSO y - H 
: K0.KR«M«T7&^^ST-S)0, y-H#-KO 
20 0O;5»-O5SfrmS/&*i5Sf 0 1 2 (B) 

co:^^{t:4^— -/D-y i7 (EKB : Enabling Key Block) 
Mfr/-H^-K (t) 0 0 ^^A< 

xo, 1. 2(ciH^-rscit*^tr^^-. 

[0 1 3 51 01 2 (B) iC^TEKBtt, m^i-iH^^ 
© 5^ J V - :/ i C *3 V i T * -r ^ *T it i^* V X ^ — =^ - €: BH^m 
-r^«-&lCfiJfflnftg-efe^o ^^!t:^Ji:bT. 01 IIC^ 
ilST^Ti'^l'— T^'F^ilCDxA'f XO. 1, 2. 3*^$)^E 

(t) masterA^i^gT-^^^^T^.. c:©<h^. t-AWX 
30 0, 1. 2, 3©^^jl©y-H^-K0 O^MSrUfcK 

( t ) 0 0 ^m^^xmrzUPim<DMm'^:^^—^- ■ k 

(t) master^Bt^^tbfc-x-^'En c (K ( t ) , K 
(t) master) ^012 (B) (C5^f E K B t i: ICBH 

[0 1 3 61 -r^i^O*.. T^AWXO. 1. 2«EKB^ 
matT#/tK (t) 0 0S:ffltiT±iaBt-^:3:*«-^t" 
ntf. t^^TWVT.^— K (t) masterS:#SCl 

40 tii^^mizu^. 

[0 13 71 [EKB<£fieffltycVX^'-^-©BE*] 
0131C, tKf.^TWVT.^'— K ( t) masterS:# 

^t&mmti'X, K (t) 0 0 ^fflt,^Tfifc;^j:*a©-7 

;7^^_:^_K (t) masterSrBS-^^tbi'Six— rS'E n c 

(K (t) 0 0, K (t) master) <i:0 1 2 (B) tCS^ 
■r E K B <!: *flSS«<*S::n- bTS« Lfcx/N'^f X 0 ©«a 

[0 13 8] 013 t-^t"J;^JC. T-ZN'^f X OU. E# 
j«i*}Ct&iW$nTVi^1M:ft : tSt^-^WEKB tg^i-Ji^fe 

50 e,ja^i;*l**flbTu-&y-h*+-KO 0 oSrffliiTiiC 
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L/!:^l^«<7)EKB«aSl::ctO, /-H^-K (t) 0 
(t) 0 0 ^fflV^TMfrVTs^-^-K (t) master^ 

-(7.0 f)^'£m^7s^—^'-K ( t ) master€:^^lCg# 

[0 13 9] il(D53gf*^Xi57-:^^-(7)3if#«!lSS: 

(c) iDaster^4-A.6n. g#co>c^ ij {c^ifetc (Mft: 

[0 14 0] M^-^X^'-^-K (n) master.hEKB 

STSWJC. XT-^y:/S 14 0 1 {:i43l^T, lE^S 

7^^— 41— K (n) niasterOB#.«^ (ffifc) S"^ : n (C 
n^. T'l/ (pre-recording) IS^IMrf^t*^ (Generati 

on#n) t\i^^ct\z^^) ^m^iti-to mu^mzi-^. 

-^X^-^— K (n) masterOS#.^ (ffift) # 

^{t-^X^-^-C^Sg^ttSU. X5^^yys 1 4 0 2(C 

^ffi:ft+S#gGeneration#n7!^^*S'ritf^ : n i:$:JtRbT. 

[0 14 1] TsV-y^S 1 4 0 2 1:i4dV^T, yufH^iH: 
f^if^Generation#n7!?^^-rtH:f^ : nCDZ^t^. ^M^)^"^ 

Ufa^ttf^W^GenerationlnTi^^'^fffif^ : n 7^^. 

^fzitmcom'^. XT-^^ys i 4 0 sib^s 1 4 0 s?: 
7.^yzn.x. -rx^-^-Mff^aa^^T-r^o bp 
"5. g#co^^'j«cfE«$nfcvx^-^- 

K (c) master (Pt-^ff^X^-^- C) cDMSTttfr-^ 

[0 14 2] — X^^^yyS 1 4 0 2(C:loliT. T'U 
faS1«:f^it^Generalion#n7&^St"1fi:f^ : n<D:^^^. 
UlClHtt^n^cfft^ftvX^^'-^-CCOlt^: : CctO^> 

l2ti^n^cBt#{t-^X37-4^-COffif^;!;^\ :/UfiE®1t 
f^iit^Generat ionSn;&^*-riH:f^ n ct 0 hu (^ttf^TS^-S 
X5^*yyS 1 4 0 3\zm^^ lE^mi^Btt. IE 
W^ft^^— yn^y 57 (EKB : Enabling K 
ey Block) ^rM^ttJt-o 

[0 14 3] XT^^yyS 1 4 0 4lC:fel^T. lESS^SS 
Hti, X7"-;/7'S 1 4 0 3TK^fcBb;^cEKB<h, S# 
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o(c*3tt^Ko 0 0 0) *cty^/-K+- (SI 1<^7^ 

y\*-rX0{C4D^t^K0 0 0,K0 0.. J ^V, 
iB^ttf^^^GenerationSn (^1 3 {C45tt^ t) B^.^T. 

coy-HO o<;:^itK (t) oo$:itff-r^o 

[0 14 4] X7=-u/:/S 1 4 0 5Ttt> X5^:y:/S14 

0 4{C:feViTK (t) 0 0 ^f#^>nfc A^S:!^?^^:^*^ 

^nxl^^^liiSr^^Tc^T. XT^^yT'S 1 4 0 6 75MS 
10 1 4 0 8S:X + *;/ybTVXi57-=^^-MSr«!lSS:«IT'r 

-So 

[0 14 5] K (t) 0 0 ^ttenfei^-^. X-T-^y^S 

1 4 0 6lCjt^, iE®«f*:7&^6Enc (K (t) 00. 
K (t) master), r?'ci:^^>> K (t) 0 0$:ffll.^Tt 
S#.^T<7)-7X^'-^'-^»t-^{tU;^cfitS:S£<55ftH-ro -^L. 
TX^.y:/S 1 4 0 7 tCiJViT, C10P&^:5:«:K (t) 

0 OSrfflt/^T^-^LTK ( t ) master ^tf-»T^o 

[0 14 6] X-T^^y^S 1 4 0 8Tti> g#<^^;^i^'i#':^ 
ij— :7^— (El 1 1 CD^'/NWX 0 tCfett^K 0 0 0 0) 
20 ^^fflV^TK ( t) maslerSrBt-^^tUTp^^UtC^&^T 

[0 14 7] <h:i^T\ -TX^-^-ti> (ffif^) 

O;:)^e»#JiS{:ifi&ffl^nTi/i<30^\ tfb<^^iw:ft<^-^x^- 
^-ii^^s -Sl^tfirf^OVX^-^^^-^thS^tCct 0 v-X^ 

^OVX^-=^-col«:«:<i:. i2-S^i:vX5^— ^-(7) 
30 ^fc1tf^t7)*^Xi5^ — ^-^f^fiXf 

[0 14 8] mTL^i. iB&s^iiBfciatg 

$nTli^-y'X^-4^-MKC!)tt:^^;^mf^ i + 1 X& 

0, ^^'f—9(j:>n'^\zB'm:f^ (MW^\z^m^ritz) 

-^X^^-^-MKc^ffirf^Tj/^f^c: i - 1 X«)^«^. -^X 
^-:^^-K ( i - 1) mastered:, 8H®W^^SJ-4oli 
T, — :*r^1tBI|gcf ;5f^2lH]ffll.i&n, f (f (K (i + 
1) master) ) ^tt^-T^ CI ch iCct 0 *^$n^o 

[0 14 9] *Ac. IB^S^IiStCf2tt^nTli^'^X 
5'-^-<3[)ttt:>R:;&^1ftf^ i + 1T*0, f^^W^cvx^-^ 
40 -C^ltf^T&mf^ i - 2TS^«'&. ■v'X5'-4^-K (i 
-2)masterfri, -:^f^14SSc f ^ 3 [ilffl l^T> f (f 

(f (K ( i + 1) master) ) ) ^V^Wt^Z^XzX.^) 

[0 15 0] dcx, -':;^f^1tHSc<bbTti, {^JA«. 

"yzi. (hash)H&^ffll.^^ d ^tS^X^-So 
\%. m7L\t. MD 5 (Message Digest 5)-^, SHA-1 
(Secure Hash Algorithm - D^Sr^ffl-T-g) C td^X# 

50 ^J'— 4^— K (0) master, K (1) master, K (2) ma 
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sfer- • K (N) master^, * "pT^^ 1^**8?) T*5 

(N) master^lS^L, ^(7)VX^— ^r— K (N) mast 

<J:0Sff<7)iftf^(DTX^-:^^-K (N- 1 ) master, K 
(N-2) master, • • K (1) master, K (0) ma 

(D) VT.^^— K (0) raaster7^;^eJ(M#^Cfi^fflLTti 
[0 15 1] ^tz. -:^fp]ttMic<hLTtS. mx^:£. 'jk 

— K (0) master^^^L, ^(D^:^^—^-K (0) 
master;0^ib^S5fflLTVKo m^^. ^-mrfmm\t. Ml 
mit^^<D^7.^-^-K (i) m^sieri^^'^^^mizU'Drz 

^(DlWRti!(D-^7.^—^—K (i-1) master 20 

mmmxmm'r^z.tizj:r)±^]^xmm'r^o c: 

'to:>'^7.^-^-^. 'j>mmxmmT^z,t\z^K>. t 
(^Ifrf^ct 0 mi<^-ffl:«:<7)-TXi$'-^-*»^ c t:fy^x^ 

[0 15 2] ^CDlE^l^^eS70^^=l>5">^J/^g 30 

sr(Dmmmmzmmr^m^<D. mmn^mmo^mmiz 

-^^^xmi 5coya~-^r-h^m\^^xmm^^o =i> 
^yyy'—^^t. ^^nRcD-^x^-^-iz^ommt 

[0 15 3] ^rmWlZ. T.'T-jyS 15 0 1 \Z^^^ 

X. mmn^mm\^. ummm^^. y}yumm^mmL 

Generationffn^K^tHTo ^tz. g p< ^ U ;O^SHtS L 

yS 1 5 0 2\Z^\^^X. ^CD\i^mt'^7s9-^—<Dm^ 40* 
c yUfE®iM:«:t»fSGeneration#n/0^'^riM:f^n i:^ 

[0 15 4] T.J-yyS 1 5 0 2\Z:^\^^X. ^^UtlfE 

f^ttSGene r a t i on#n}0^'^-r ffift n JW^T/cf ^ ^i^J^ $ n 

Cc7)-ffi:>Rc;0^\ yi/fE®1H:f^W$SGeneration#n;^^'S-riH: 

^fT^^-ric^^T-r-So 50 
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[0 15 5] — X5=-^;/ys 1 5 0 2(C:feliT. 
C cottf^T^^^ y l/fa^ttf^W^Genera t i on#n/ii^*«-r 

jt^Generation#n;0^'«rffi:f^n ^tz\t^tl^ 
X5"^;/yS 1 5 0 3(C3t^, n>5^> 

[0 15 6] inRmm(Du^ntz'^7s^-^-\z^^ 

m(Dt^'^nrz^7.^—^-\z^'oXziyj'yy^-^(D 

^mt^M^^ni^x. ^u.(7>^mmmzi&mT^^m 
tc-^viTSiKt-^o ?Jc*3. z.z.x\t. 9t\zmm\^rzh^ 

'^M'^nrz'^7.^-^-^nm\^rz'T-^\z^':5\.^xy^ 

-^^mnit\.xmm^mzii^m^^9!m\z'D\^^xwim 

[0157] EI16. mi 7 (Dmm:fay^m:^^zsm 
1 B(Dya-^^^h^m\^^xmmr^o zz.x\t. m 

mmi^hi.xyty^4 x^^mtT^o zcommmxit. 

ia^^^Jic^^— ^cobi t-by-bitn tr— ^(W<7c:d6{c. 

nimmi^m^(Dmm^ti.x<D9'>f i dcdisc i 
D)S:. ^-^^mmt-r^mizi^m-^i^^j^oizLxi^^ 

[0158] igi6. mi 7 (Dmmyay^miz'iitr^ 
X. mmnim^i^i 5 o-^^mff-r^y^-i^cDiiismt^&m 
(Dmmiz^^^xmm-r^o 

[0 15 9] Md.mn±mm 1 e 0 otig#cDp<^u 1 s 

0 (mi, 2#Sa) {c*&*flUTl.i'5VX^-4^- 1 6 0 
1. 5=^-i$^fi¥tlfia®:^^ffl4^- (:3if-if>h:^- :Co 
gnizant Key) 16 3 1 hi. < iity'—i^^^^m^MmijiS. 

(y >:J^zi-^>h^- : Non-Cognizant Key) 

1 6 3 2^m^a^r. y'-^mmMm:^^m=^- (cogn 

izant Key) , "t^— ^#^«¥WiH&:^Sffl^- (Non-Cogni 

zant Key) \Z'Ol^X\:X. f^iBT^o 
[0 16 0] 16 0 1 mi 4(Dyn- 

J: 0 mmn±mm(D iz^m^rirz%m^-x$> 
0. mm(DjzoiznRmmm^^tix^K). ^n^niz 
uRm^:^m}Bm'f^nxi^^o :zco-^x^-=¥-{t. 
^^(Dmmn^mmiz^mu=¥-. m^j^mi hz^t 
j^MW(D^)i- ^ 5^AW :^\z^mu^-x$> 
-So t'awx I D\tmmn±mmi e o oo^butt* 
0, ^isbmmn^mmiz^m^nxi^^m^i^:£mm^^ 
^comm'T'X&^o cicDa'/Nwx 1 Df^^ij^M^nTi^T 

fe<fcV^o y'—^m^Ml^:^^m=¥- (Cognizant Key) 
16 3 1. y'-^imVrBdm:^^m^- (Non-Cogni zan 

t Key) 1 6 3 2 td:. '^n^tKDmm'e- Y^lzn^LTz 

^-x$>D. m^(D^mn±mm^z^mo)^-x$>^. 
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[0 16 1] mmn^^mi e o o\tm^^ii^y'-(7.{7 
x^&^mmmi^ 1 6 2 0 \zmm^t ltcot^^ ^ i 

D (Disc ID) 1 6 0 STi^^'KlcE^^tlTt^^T^^cif ^7^^ 
^l^^r^o fE^^nxvm^i, -x^Xi^ I D (Disc I 
D) 1 6 0 3*tttlib Ol6fCffl^) , lE^^nxi^ 

;^i:^tnti, P&^jaS^Si 5 0(cfei/^T^>yA(c. 

7^^Xi7 1 D (Disc ID) 17 0 1 ^^jSb, 
(cE^-r^ {017lCtH^) o x-^X^ID (Disc I 
D) 1 6 0 3«-^(^)a'^X^{^r><i:'::>$>tl«cfcV:^c7)T\ 
U F-r >x u yuE\z.^mt^ t pItgTS>^o 
[0162] nimn±m i 6 O O Jl. 

mrm^mmt{.Tmm^nr^7.^ >/^- 1 d (stampe 

r ID) 1 6 8 0 Xi^^ I D 1 6 0 3 ^fflV^T, ^ 

-i'Xi7HW4^- (Disc Unique Key) ^^fiR 1 6 0 2-r 

[0 16 3] V7.^-^-(h^5^ttfB<hbTCDX^>/^ 

— I D (Stamper ID) 1 6 8 0 ty'^C 7.^ I D 1 6 0 3 

Xi7HW=^^— (Disc Unique Key) 

0t-^S^^fflV^7^c/Nv>^:i^Sc(CVX^-^^- (Master 
Key) ^X5^>/^— ID (Stamper ID) ch^-rXi^^ID 
(Disc ID) ^Xfjl^Xn^tlfz^^^^^^^t^i'^^^ 

ffi^, FIPS ISO-lT'^e^^nTV^-S/N^yi/^M^cSHA 

- 1 {C> -^r;;^^— ^X^>/^— I D(Stamper ID) <h 
T^^X^ID (Disc ID) t<DYiyhm^\Z^O^fS,^ 

^Jix — X^HW^— (Disc Unique Ke 

[0 16 4] ±mVtc<tv\Z. X5^>A— ID (Stampe 
r ID) 1 6 8 0ti, fee^&^l^feT'^X^lClH^^nTV^ 

rz7.^>/t- ID (Stamper ID) SrfiJffl Lfc^-Y X ^ H 
(Disc Unique Key) (D^fie^j:<i:(?)?R^5aatd:, 

[0 16 5] COcte»(C. *^^<^<S^{C43l'iTti, iRp 

mm^nTi^&\z^m^ntzm^moy^f&^^ff't^m 

^9l^mwz:^5l^x■\l^:JL7U^m(DT\z^yy^>y^^ 
mmm(Dm±fS.mm\z^m^ti^mfSix$>D . ^mmw. 

[0 16 6] ±m\^tz^O\Z. 7.^>/^- I D^COlt^ 
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m^^^^<i^^^^ii^^!&^^f^wz'D\^^x\tm^xm 
m\zm.mr^o 

[0167] mmn^&s 1 6 0 0 ti, :k\z. mwtz:t 

(Dmmm'V$>^^'< h)l^- (litle Key) ^Bt-^fiaS 
^^15 0 (El, 2, #88) {-4Dl.^T^>yA{C, 

10 1604b. ^>fx^i62o izmu-r^o 

[0 168] -^iblz. Z.(Dmmz^^'f^Bim=E—\^'^^y^ 
— ^MVxni^:^^ (Cognizant Mode))^^^^— ^#^fi¥WlE 
(Non-cognizant) t^^mrTy^if^^^l 6 3 
3L, -r^Xi/ 1 6 2 OfCia^^-hM 6 3 5 SrE^-r 

[0 16 9] Cd-C, ^^Mt^TfH^:;^5S: (Cognizant 
Mode)^^D^5^— ^^^^<»Wf5®:*S (Non-Cognizant Mod 
e) tCOV^T^B^r^o 

[0 17 0] Z2>'7->y\t^n^n$>^'^^CisbZJ>y^> 

nXVi^o h'7-i7mm\Ziol^X^^(Dm 

0. !(kll5ttc?)^^l^ll^^l-TCD5 C DTCP (Digit 
al Transmission Content Protection) '>X-7^A"rH=i 
tf— $iJtffltS$B (CC I : Copy Control Information) t 

\^^o':^m^m^^xmiki.x^^^o :3\z-mmm^ (cc 

[0 17 1] x>^U^>-3 >^-H • ^Z^f^'r—^ 
30 (EMI : Encyrpt ion Mode Indicator) I'^/I'ir^yh^ 
^v^l-fe-SS y t:>:/ h(D±e2 t'^y h^figoTn tf— 
Plt^ (CCD ^iil^;<*r:XAT*0. Sm^^/W 
x;0^ffl*{cT^-trX'r^^5^^*T^^<i:l^»?F{c. ;::cDfB7^^ 

bLif^x^^^^o^zf^-Dxy^^^. 

[0 17 2] EMUCJ:O^CD/^^r^:/ h(7>Bt-^fb^:--F 

EM I ^IEEE1394/1^r^;/ Y^v^\zm< ZL^\Z^ 
0> Sm«g§tt«3JAfriMPEGteillX hU-A (MPEG t 
40 ransport stream) COif tClfiftiJiS nTVi^ll2s!)jA,;^:3 
e-Si'^tS^ (Embedded CCD (^izE) ^BJOm-TCi: 

[0173] EI201CIEEE139 4/1^ y Vy^ — 
-^^yhSr^-To (Data Field) ^\Z 

ss^n, =ie-©jffli«^ (CCD ^LTCDx>^u:/ 

'>3 > • H • >5=''Y (EMI : Encryption 

Mode Indicator) y V'^v ^\Z&^^ y \±v V 

50 0±142 ti^y hiC^^^n^o 
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[0174] EM 1(^2 ki-y ht»#Bti. iS^ffllClJiSUT 

mo 0 \tmMhmmthiiL>'mm^< . =i>5^>^ytigft 

\za\f—t^^mf<i^::^^-y^J— (Copy Free) ^^L. 
fiSO 1 tl— }:i-(Di¥f$.A^m^U n tf- 1 v^x^?^ 
l^— S^3> (Copy One Generation) €:> Hi 0\tMj^ 
OCopy One Generation S^fS@$n/!:f^(7). S3 ti 
— 7:?^*^ih$nTl/i^/— t:— (No More Copies) 
Sr. fiSl 1 tia>'7^>^y;&tU U-XKF.^5^i^C>-rtf-^jJi 
•Cfe§^7N*-ZF tf- (Never Copy) Sr«To 10 
[0 17 5] D-VHS-^/N-F^^^Xi^cOi^Tifa© 

X h g - A I- n - ^ T jE b < « * ^ 0 a ;^ ^ J: -5 
iC, mmmizm^i^^CC I (Embedded CCD (DW,m 
(ex. Copy One General ion?!^^ ^ No More Copies 

^) ^'Z^^mt^-r. EMI (D^m(o^ff^{i<^\^K t^^ 

O mmcfjmt^'r- ^ (Non-Cogn i z an t ) fB®:^xC-r 
[0 17 6] ;i^V^o?^ca t:-$iJffl]W$g^j||^/t 

h (;^(h;t^SDV:7;r— V-/ h :DY- format) JC*5l^T 

\zm^iL'^nt:Lzi\fi-mmmmL (ccn ^rn^ii-^c 

CI (Embedded CCD i:ii?^<o =i >5^>^:/7^^^*Bt-^ 

{t^nxtejU^n-S^^. il5e)iA.5^CC I (Embedded C 

CD ^zjy^yy t:nm\zmm\L'^nxu^^ti. 

ih^CC I (Embedded CCD <DaJ{^(7)^MtSSji<t $n 

[0 17 7] CCT. tuaibrcEM I C0 2 li>y hCOU tf 30 
—Mi&mmt. misb&^CCl (Embedded CCD t(DM 

$>^timj'/^-<7.\t. EM I *5ci:tKilJ6jZi^CC I (Em 
bedded CCD (DM^^CDU ^-9^mmWi(D^W\^ffUo . 

misb^^^CC I (Embedded CCD C0«fWtg:^?O 
?ii:l.^lHS5"A*-f X<7)«^. EM UiMffT^jO^. Hftii 
^CC I (Embedded CCD coMi^^jlfTbTSV^C: ^liC/^ 

[0 17 8] =i>T->!y|H®^{C. lE^T'A'-f X7&^ri> 
5^>^ycD— fflS<hLTejai$nfcll«6iA^CC I (Embedd 40 
ed CCD OMSff^fToT::3>5^>^yi:<ht>{CfE©-r^fE 
mys^^'T-^M^ (Cognizant)fa^:^rS<hli'5o 7="- 
(Cognizanl)fa^:^iC<t, (Non-Co 
gni2ant)IH^:^xCTil. "r — i^t^M^ (Non-Cognizant) 
mm-^j^(D:^^m^i2^^CC I (Embedded CCD OM«f 

PEG^=i-KbTT:^D i?'®^ t> B^^fS-^ ^S^"r 
^fca6{lti^c7)feS^ti5^-^^WfS^;^S (Cognizant 



42 



K/^^^tg^J^"3m§lt^?-^^M«ffS@:^^ (Cogniz 
ant Mode)S:Slfff ^ttltg*fiiATVi^Clt:^»^iiJS-tf& 

[0 17 9] ^»Wia®::^iS: (Cogniz 

ant Mode)S:||fft"^fc«>fC«. n>'r>y(D—m^iiy 
Tia*i2^snTli^a*iA^CC I (Embedded CCD 

^^i^mizmfz'ikizm^^nrzmmo&^i^^^t^m^rirz 

v='—^y:t—'^yh\z^\^^X\t. -?-cD#rbv:i-^— ^:7;f 

-T^yh(C*fLT, -&V>S{t§75^'x-^«Wia^:^SC (Co 
gn i z an t Mode) ^ HfrT ^ CD IZ mm tU.^ m^tt^ 

[0 18 0] m^x. Z2>^>y^mm-r^$>^mm 

(Cognizant Mode)^||fTb, ^rc^U^y^—^y^i- — 
(Non-Cognizant Mode) ^Hff ^^^ofc. M:^<D^ 

[0 18 1] T^xo:>zi>5^>y\zML.x. 
^ ^WS\Umcn^ (Non-Cogni zan tMode) OfS® \.tf^fxf^ 
^fz. m\zmi5(>ih^C C I (Embe 
dded CCD ^MMX^ ^y :t—^ y h^m-^:::^ y'ryy 

(Cognizant Uo^eXD^mfft^m^^W'&T^Z.^i 

[0 18 2] :i(DJzo\Z. 2 0COZI tf-$iJP+»$g, 
:b'e.EMI ^HfejA^CC I (Embedded CCD i)^^^ 

^rz:3>^>ymm^mrr't^m^ti.x%. ^f- 

^mmzm-)^^ (cognizant Mode)^^ff-r^^g§ch. 
y^-^#MWIE®;^xC (Non-Cognizant Mode)CDfE^^ 

m^^^mmti^mM.r^^mz^\^^x\^. ^f—^m^^ 

(Cognizant Mode)Tfa^Lfcn >^ >^>' ch. 
— 37#M4FrfS®:^S: (Non-Cognizant ^^^€)XmM\^tz 

zi >'r>y\iLmi^\zwA^^n^ z u i^o 

[0 18 3] f x-^7»WfB®:^SC: (Cognizan 
t Mode)Tn>7^>:y^ja^LAc«'&lCllEM I 
jA^CCI (Embedded CCD (7)^:^(7)3 fcf—^JtflI+S$B50^* 
Jgfr^n^T^^, t'-^'^^SWIES:^!!: (Non-Cognizant 
Mode)T3i>5^>^ycofH^7j?^||fT^nfe«'&^i. EMI 
(D^^^^m-^n. ilfi^jA^CCI (Embedded CCD 

fi?)iA^CCI (Embedded CCD (C^S'&TiJ^tS C 0 , 

(Dzi}^-mmm(D:^m:'^^^^'^^f^^^rz^\z\t. 7 

-:^^WIS^:^iC (Cognizant Mode)TfE^$nfcri > 
7^>^y^i, 7'-^^«?WfHS:^iC (Cognizant Mode)^:— 

(Non-Cogn i zan t Mode) X^^^tltz Zi>^>y fi^— 
5^#^WIH^:^xC (Non-Cognizant Mode)^— HTfE^ 
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[0 18 4] CCOfcfi&trti. Z.O^y'-^m^Bim:^^ 
(Cognizant Mode)^, y'—iS^^m^Bim:fj^ (Non-Cog 
n i zan t Mode) i * * o Ac < WKDm^^o^^^^ CI «h fc— 

[0 18 5] ^C:T2l5:5ieBO«^T-«, C:O2C>C0fa® 
:^iC:. *r?'j:t:)'^^-'^^Wia@^:^x^ (Cognizant Mode) 
"T—i^i^M^niU:^^ (Non-Cognizant Mode)CDl^ 

o»t— M^i:fBS:^xS:tCct^:3>5^>>y«!ia«^«:. mm 

(DX$)^o 

[0 18 6] 5^— ^MWfES:^^^: (Cogniz 

ant iAo(3iemmm(Dmmmn m^mz^sz^m) ^i^x 

^m^- (Cognizant Key) ) ^•r^-^j»tfffH^:^S (C 
ognizant Mode) J:^fES*fc^i^*^fT^^8l«g^}^ 

-DmmizcD^mmi^xmmp^^z^mr^mi^tL. - 

^-^#^^1iffia®:^iS: (Non-Cognizant Mode)IH^ 

9iimm±^m(D=^- iy'-^$^m^mw^:fj^m^- (no 

n-Cognizant Key) ) ^> y'—^i^M^ni^'^jT^ (Non-C 
ognizant Mode) {Cck^iag^fctiS^^frA^^tg^it 

[0 18 7] 2|s:«^{Ccto. «3JA^S> x-^^WiE®:;^ 

(Cognizant Uode)xm^^nrz.:2 >^>y\Z^l^ 

X. /'\^^mmt}^x. fe^i^tix-^<^acfi, amn 

±ya^*^A(D^JE^mmzJ;:^X. x-37#^«?WIBS 
(Non-Cognizant Mode)(7)faSS*«ltg<^^<^*t" 

[0188] EI16. 017 (CMoT, =i>^>^yfa& 

(General ionin) ] 1 6 5 0$:gj#LT, cnS:fE&i« 

1 6 2 0 {ClE&^lftf^S^ 1 6 5 1 <i: VX^m^T^o 
[0 18 9] 7.^±\Z{t. EZ.COy'-^tl^EhjU^ 

5, fE®^:-H:7^^1 6 3 5, •^X5'-4^-<^1M:ftS 
^ [IS^^lM:f^#^ (Genera tionSn) ] 1 6 5 1 
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[0 19 0] >i43. ES^«E^*^1 6 2 0 

(pre-recording) Wi^^^^^^m^ tlX ^ 0 . yi/R 

i^-^-^m^^xmmt^nx^m^ntz:=i>'T->y(D 

p^oyn^^'^m^-r^mfSLiiU'DX^^^^o z.(Dmf$.\zr:> 

i^x\t. m^(Dn±mm(Dmxm,BMr^o 

[0 19 1] :i<,\Z'f-( Tsi/m^^— (Disc Unique Ke 
y) h^-l (Title Key) t> ^fi?«ffE&:^ 

^^c:^- (Cognizant Key), fe^l^ti. -x-f 7. H:^^^ 
10 — (Disc Unique Key) h (Title Key) 

x-^^«^fH#;^S:ffl=^^— (Non-Cognizant Ke 
y)> i/iTn7J?^c7)m'&-t±36^^. h;l/H*"4^— (Title 
Unique Key) ^^^f^o 
[0 19 2] -r^^iit)'^. fa^^--F7^?^*'X-:^S¥Wf5©:^ 
(Cognizant Mode)Tfe^«'&lC^i, t'-^Xi^HW^^ 

— (Disc Unique Key) (Title Key) 

(Cognizant Key)^:;!?^^ 
^-r h;i/HW4=~ (Title Unique Key) ^^^L. IH® 
^:-F7&^*x-i$'#«WiB^:^^ (Non-Cognizant Mode) 
20 X&^^^\Z\1L. 5='>r'Xi7HW4^— (Disc Unique Ke 
y) ^^^h)V^— (TitleKey) 5^— ^#^^WfS^ 
-^^m^— (Non-Cognizant Uy) Ei)^ ^ ^ ^ h ^ 

— (Title Unique Key) ^^J^KT^o 

[0 19 3] fiua!UfeJ:'5(::. -T-^^^f 15^:^3: (Co 
gnizant Mode)fS^ffl C0^j:x^tt^<h LTOPt-^{t, m^ 

%Mm^fiim<D^-' {'f-'^m^u^'^^m^- (cogn 

izant Key) ^^WiE^^^iC (Cognizant Mode) 

— ^— ^I^^WfS^:^^ (Non-Cognizant Mod 

30 t)mmim(oiis,m^^t.\.x<Dmmt. m^n^imm^fSLm 

<D^- {"f-^^^m^UScfo^m^- (Non-Cognizant 
Key) 'f—^^^M^W^mcf5'JS: (Non-Cognizant Mode) 
ic J: ^ IH^ ^ Ac tlS:^ ^ fr A ^ ^ ^ (7) ^tJ/^* W 

T^o tieoT. -'i5<Dum-j5^\z(D^nm^i.r:Lm.m\z^ 

(Cognizant Key) ^ffl I^^t!^^, fe^ (^^t^-x — 
Wfa©:^^ffl4^— (Non-Cognizant Key) Vi^7&^C0— 
40 [0 19 4] L;5^L. p#cO:^-^*&^b, M^-HCO 

IC ct ^ ^ llfrT -5 ^ i*^T ^ ^ <t Aci: o 

z,<D^-\^^^zfa±:7.mmiZ'D\^^X. ^Ut>%. 3> 
7^>^;/(^f2^*x — ^«¥Wfa^::^SC (Cognizant Mode) 
iZ^-DX^^tr-r^i)^. (Non-Cogn 
i z an t Mode) xWfft^ ^ i^^T ^ 'fU'\z7.\Z'Dl^X 
0 2 1 ^ffll^^TIttWr-&o 
[0 19 5] S^e^lC^i, =:>7^>^yfe&tl, T'^-SE 
0 X - ^ (Cogn i z an t Mode) J: o TUff f 
50 -ScoX^^M^L.^^n Cinii. EM I .tJS 
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a6ii.^CCI (Embedded CCD iKD^^m^^^^C-^itU 

OPltgttfc$)0. Z.(D^'t>f^'^^\Z. 5^-^#^«?t)TfS^ 
(Non-Cognizant Mode)T6DfE#^J!ia*|gff'r^o 
[0 19 6] EI2 1 O^XT^^yytCTPV^TiJiBJ-r^o X 
T-';/7'S 5 0 0 ITil, IH^Sfi^J. "f-^ • :7 7^-*T 

\Z.^ il*ii^CCI (Embedded CCD uy'ryV(D 

^RJtgTSn^^, ild6iA«^CC I (Embedded CCD co^ 

m^:^^ (Non-Cognizant Mode)T'OfH^i2ia^*ff t* 

T^T^^yys 5 0 0 2 fa^SM7:?^\ 
(r3>^>^y) 05^n-H«[LS, SlfeiA^CCI (Embe 
dded CCD(DS£^KD. M*^5aS?^>^^pJtg7^^S:?J^^*«S'r 

a>'7^>:yi5cfcr/jga^iA^CC I (Embedded CCD 
tijl«> (x>:3-F) $nTi5D. iai6iA.;5^C 20 

C I (Embedded CCD COU^Wi 0 izl^m^ ("xn— H) 

I (Embedded CC\)(Dm.^WK>^^X^f^\^^(DX\ "f—^ 
^^^WfE^^^xC (Non-Cognizant Mode) T CO IS® MS ^ 

[0 19 8] X^^^yT'S 5 0 0 2<D'f—^ (n>7"> 
^jy) <7)5^=F— Fi[lS> iSd^iA^CC I (Embedded CCD 

T^'^yT'S 5 0 0 SIc^l^T, fE^SHi^l^fT^:^-— tf A 

^tfli. tfA:^{ci:^T^-:^^^«*fffH^:^SC (Non-Co 
gnizant Mode)TcDfB^j(aaJg^7^^^$>ofc«'&ti, 
^^#^«¥Wia@::^it (Non-Cognizant Mode)T<7)S5®5Jia 

[0 19 9] ^^\Z. X-T-^yyS 5 0 0 4(c4dV^T> > 
"ryvn^vV (ex. SfST^-^) ^-^'^^M 

frJt^yO'^'^^^^t^. ^-^tm^WMcli^ (Non-Cogn 
izant Mode)T(^fa®5aa7J?^^fT^n^o J&^T^^^i^cCli^ 
^ti, 5^-i$^^Wfa&*^ (Cognizant Mode)T<^)IE^ 

[0 2 0 0] "T-^m^WM-li^ (Cognizant Mode)T 
cOlE^^aa. ^^■(S'f—^^^m^^mc^'Si (Non-Cogniz 50 
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ant Mode)T<DfS®MScO^:^<£:SS?M«C||ff "Itgi^cCa 

fcfcb, EI2 1 coMa:7D— fca^s^n-Sct-s 

{C, 5^— ^«¥*ffH&:^SC (Cognizant Mode) TcDia®*^* 
pJt^/cCJS'&ti, a^WtCx-dJ^^lffia^^^S: (Cognizan 

t ^^^e)X(D^mti^^fi^n^z.t,\zu^o 

[0 2 0 1] ttitiLfcct^lC. iE^^:-H^^-^«¥tff 
IHSi:^iC (Cognizant Mode) <h bfc^'&Ji. 'T'^Xi7@ 
(Disc Unique Key) ^^-f h;U^— (Title Ke 
y) ch. "r—^m^tmc^^Wi^- (Cognizant Key);0^ 

h;^HW+- (Title Unique Key) IS 
m^-Y^f—^lf^m^^mcn^ (Non-Cognizant Mod 
€) hL\^fz'^'^\X. 5^^X^H#+— (Disc Unique Ke 
y) t.^^Y)V^- (TitleKey) ^-^#^»WfE^ 
(Non-Cognizant his^^9 ^ Y)\^Wi^^ 
— (Title Unique Key) 

[0 2 0 2] ^-r h;i/@W^-- (Title Unique Key) ^ 
^c0A#:e^?:i::*rffi^ll|2 2lc^-ro E12 2{z^rck-5 

\z. ^"^^^mwi^m^^^fz^w =i.mmz^ ^ V)\^ 

^— (Title Key) (h7^^X^@W4=~ (Disc Unique K 
ey) (h> ■T'-^^tFffS®;^iCffl^- (Cognizant Key) 
{'T-^WSxmMc^^ (Cognizant Mode)co«^) , 
L<ti, (Non-Cognlzant 
Key) (^— ^'^^^WfS®:^!^ (Non-Cognizant Mode)co 
^'&) ^A;^LTt#^>nfc^S^^fflv^^0iJ 1 co:;^^, 

^li^i, FIPS 180-lX^Sa^)^nTV:i^/\«y 5>zLMfcSH 
A-lt:i, TX^'— c^^— <h^^Xi7 I D (Disc ID) hi 
"f-^m^mmc^^m^- (cognizant Key) {^-^m 
^tmOi^ (Cognizant Mode)(;0«'&) %\^<\X't—^ 
1l^m^^m05^m^- (Non-Cognlzant Key) (-^-^^^ 
«¥«Tf5&:*rSC (Non-Cognizant Mode)CDii'&) t,(D\zv 
h*^lcJ:0^^$n^^-^^A;^L. ^co 1 6 0 t: 

(Title Unique Key) <h LT<£ffl-r^fi«J 2 0:*rffi;^^igffl 

[0 2 0 3] ±M(OWmx\t. ^7.^-^- (Ma 

ster Key) i:X^ >/1— I D (Stamper ID)<hx^X^I 
D (Disc ID) 7&^^)XYXi7@W^— (Disc Unique Ke 
y) ^^^b, 3:n<h^-r hJU^- (TitleKey) i:^- 
^m^^mOj^m^- (Cognizant Key) t> b < ^i^-^ 
*«Wfa^:^5a:ffl+- (Non-Cognlzant Key) e> ^ h 
JUHW^— (Title Unique Key) ^^n^'tl^^T^ J: 
-^fCLTl^^;^^'. ^-f Xi7HW4^— (Disc Unique Ke 
y) ^^^giiLT-^X^*-^- (Master Key) <h5^^X 
^ I D (Disc ID) <h^-f h;l/^- (Title Key) "t^ 
-^«?«ffa®:^iS:ffl^- (Cognizant Key) t> U < fri 5=^- 
^ #^Wfa^:^xS:ffl ^ (Non-Cogn izant Key) ti^^%^ 
h;i/@W4^- (Title Unique Key) ^*^bT^><fc 
<. -^fz. ^-r h;L^^- (Title Key) ^ffll^ric, ^ 
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(Master Key) ^"f^T.^ 1 D (Disc ID) 
^-^m^^mOl^m^- (cognizant Key)feb< 

\t.'f—^^WS\WM.-H^Wi^— (Non-Cognizant ^ti)ti^ 
e>^-f (TitleUnique Key) tS^cT)^*^ 

[0 2 0 4] fctA«±fE05CDTCP(C^^^n^ 

PEG 2(7)TS/1^u/ hTfeiH^n^^^TiJ^'^^o fct 
«ffi*5cill*S«l-^cir^y h h^yy^J^^yi^x (ST 
B :Set Top Box) *^Cl<^]ftill^iag^m(C 5 C D T C P 

$nfcMPEG2 TS/l^^y h^IEEE1394Ji 

[0 2 0 5] la^n^i^Bi 6 0 ^m^mc^^^^yr 

TS5aS¥^g3 0 0 l:i45ViT, ^Tsn^vV^^^X^ 

[0 2 0 6] ATS^{**DUfcTSA^*y h^Xffl (M 
(gl5<D±coEI#eg) HI 6. 

6 0 8) Ti±l;^^n^ 3 2 tf^y hOATS^^Oy^'D-y 
i7'>-F (Block Seed) 5t{C5fefiXUfc^-f h;l-H* 
(TitleUnique Key) <i:7&^e>. ^(O'ZfUv^^^'T— 
^^mmt'1r^m'V$>^yayi^ • ^— (Block Key) 
75^'^^ 1 6 0 7 $n^o 

[0 2 0 7] yp^yi7 . (Block Key) (0^JSJ5& 

O0iJS:B3 2 SIC^Tp 0 2 3 Tti. l^"rnt) 3 2 tf^y h 
0:/P^y • H (Block Seed) 6 4t:^yh<^^ 
h;UHW^— (Title Unique Key) (h;^^^). 64t:>y 

V(D:fUyi7^— (Block Key) ^^^£^^0^]^ 2 

[0 2 0 8] ±gtc:^r«?^J »fi6 4e^y h, Aty 
:^7!^-?^n^'n6 4 tr^y hcOBt^ffiSc^riSEfflbTV^^o ^ 
-f (Title Unique Key) C(7)BS-^P^O 

yD*yi7->— F (Block Seed) hZ2\£^yV(0 

tz^^^^u^^^- (Block Key) L\^X\^^^o 
[0 2 0 9] 0lJ2ti, FIPS 180-1(7)/N*y '>iBlia:SHA 
- 1 ^ffll.^fc«?yT&^o h;U@W+- (Title Uniq 
ue Key) (h^D^y^i/— F (Block Seed) ^S^Lfcffl 
^SHA- 1 {CA:^^. ^CDl 6 0 ti^y hc^ttl:^^. tz 
(hAfr^TSe 4 ti-y hcD^fleffl-r^Tii:. 6 4t:!yF(C 
mm\^tz^<^^':^u^y^^— (Block Key) ^LTt.^ 

-So 

[0 2 10] U:^. ±fE*Trtix>r X^H^^- (Disc U 
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nique key) , h;i/HW^— (Title Unique Ke 
y) . ^Uy^^— (Block Key) ^^n^n^fSCT^m . 
^mm\^f:-f}^^ TzhTL^-i. a'^Xi^H*^'- (Disc Uni . 
que Key) t:^^ F;i/H#^— (Title Unique Key) CO 

^^&liff'r^;i<h75:<, :/D^yi7crtfc-7x^^-4^- 

(Master Key) t A^ >/N°~ I D (Stamper hy" ^ 
7s!7 I D (Disc ID) VJV^- (Title Key) ty* 

D^yi7->-F (Block Seed) <i:, x-:$^«¥«flH&:^aS:ffl 
4^— (Cognizant Key) (Cognizant Mode (D^^) feL 
10 <tS^-^#l¥WfB®:^^ffl4^- (Non-Cognizant Key) 
{^-^^M^mWcli^ (Non-Cognizant Mode)CO« 
-&) ^m^^X^Uyi;^— (Block Key)' $:^fi£bTfe 

[0 2 11] yuyi^^—i^^^J^^n^t.. ^l^^ntz 
-Ifu-j^^- (Block Key) ^m^^Xr^Uy ^ 5"—^ ^ 
Bt^^tr^o 016. 1 7CDTSlC^-rJ:'5fC, yP^y 
i7'>— F (Block Seed) ^^tr >^'n ;/ ^ ^^^O^glcT) 
^l-m;\*-f F (/i<h;^frSm=8) ti^gt (-fe 1/^7^1 
6 0 8) $nTPt-^{t:*f^<i:i±T, m+ 1 F St!)^ b 

4;s-fF^^*n^o -iri/^^ 1 6 0 8tCcto^g|$n 
fc^m+ 1 AW Fi^l^<?:>:/D^y ^^^T^-^ti, ^^^n^ 
©1 5 o^c^^^)la^$nfcB*^^tT;^3^uXAtc^^e■px 

Pt^{t 1 6 0 9 $n^o ^mtT)V:^')XL.hl.X\^. 
;^C(hAti'FlPS 46-2T^^$n'&DE S (Data Encrypt i 
on Standard) ^m^^^Z. hti^X^^o 

[0 2 12] ^m\^tz^o\z':fuy^ • i>-Flc: 
ti, n tf— $JjPE1t^(CC I rCopyControl Informatio 
30 xi)^^^^±^Z.^f)^nm.XS>K>. 

(Cogn i z an t Mode) X<DW^W!!M S: ^Ifr b fc . 

(CCD T^^ila6)^<5^C C I (Embedded CCD (C^* 

fH&:^SC (Non-Cogn i zan tMode) X(DWMW^'^^WtT L 
^-^tCt^. 0 2 OTlttWbfc/t^^y F^^y^icDEM I 
(Encyrption Mode lndicator)S:JKefcL/t:3 tf— $JjPtt 

[0 2 13] -rUt^^. -x-iS^^SWES:^^ (Cognizan 
40 t Mode){Cct^t*ffifE^5aS(7)«^. 5"-^a5rt(7)ile* 

iA^ne-wst*^ (CCD {^so'<=Ftf-^Jtait»a 

S:^t5':/D-y ^'>- F^, lJiy.±(^/t^r'y F:0^?);^ci:^:/ 
D^yi77^-i$^{::f^SDbfcfES^ffi^fiKfi!La«:*fTU. ^ 
(Non-Cognizant Mode)(CJ:^Wffi 

fE^5{La(^«^. /t^^y Ftc^^n^ne-frjffli^^ch 

LTOX>^ Uyi>3 > • F • Ot'^T ^r— ^ (E 

MI) i::»-^<=3e-©JffliiSffi^-&tr^Dy/7'>-F 
\&.±(Dn^-j ht^^t^^':^^v i7'f—9\Z{^jlX\\^ 

50 [0 2 14] CZ.X. mm-r^m^yj\^zi^jXAo:>-yn 
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[0 2 1 5] -TAi^o-^. 1 yD-;/i7l'1*«fi-r^TS/1'Jr 
1 9 2 *X=m+n*LA^^0iZ.-pJ;-5!CX. m. 

[02 16] Bt^<i:bfc^m+ 1 A'-f iO 

i6i2t Lxmmmw i e 2 o fc*&*fl$ns. 
[0 2 17] etiomsicio, n>5^>^;/«:rD>>i7 

[0 2 18] ±m<D^^\Z. *1|lB)tT«, iftf^^s^n 

•f^ J; D fr b V i iftf^ ^ *-r ^ IHgtS^gg"^ * ^ - 

[0 2 19] $e,lc, yD>y5'*-«±jz!i«)J:^«-7=^- 
:5'^*TfE@:^SC (Cognizant Mode)©iH®co«-&tt, X 
-5')eWIH^:^iS:ffl=^- (Cognizant Key) iC^-rJV^T^ 
BK^n. "T-^t^Mm^mys^ (Non-Cognizant Mode) 
ia®(J5«^«. 5"-iS'#^«WfS®:^^ffl=^^- (Non-Cogn 
izant Key)icSr3'UT±fiX:^n?.= m ^ c7)Bt^{t5^- 30 

Egt^i^iCffl^- (Cognizant Key) t) b < 
iaSi::^iCffl^— (Non-Cognizant Key)) Sr§$0^§g-CC? 

[0 2 2 0] ■mty*'^ 5^-^^m¥xsi^^^^=^— (Co 
gnizant Key)«, fe&BttCX h 'J -A4'lC«*)i*tlfc 

Embedded Gci ^m.^i.X'&m\z!t-^rjim-r^mi]^ 

S (Cognizant Mode)-rfaSl$nyS:a >T->'y©S^« 4( 

[0 2 2 1] i^itic. 7^-^#^MWia®*s:ffl^- (No 

n-Cognizant Key)tt. E^B^fCX h U -A*<©««e>jA*- 
CCI (Embedded CCD Sr^MbJiVix-5'*«?*rlB^ 
(Non-Cogn i zan t) Wia®^- h' rotat^*^*'^^^ 

^fiWBa®:'^^ (Non-Cognizant Mode)T?fB®$nfc:3 > 
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[0 2 2 2] :kizm 1 8 ics^-r:7n— 3^-^— hlctietJ 

T. T'—s^mmmmizthisi^xmn-^n^T smm^ 

^3 0 OiC:fett^ATS#»n«aa*3±tKllf^Sa^^Sl 

5 o\z^n ^m^Mmomm±w<Dmn^^tli>xmm 

-r-S. 018(7)5180 ItCiSliT, is&w^s««i 
#©^^U 1 8 Ott1SiWbTViSVX^-^-*ckt>*7' 
-3'<»WfH®:^Sffl=^^- (Cognizant Key) (5^— ^'^^W 
fE®:^it: (Cogn izantMode) ©«-&). tjb< lix — i5'#^«i 
WiSgl:^^^^— (Non-Cognizant Key) (5^— 
la®:^^ (Non-Cognizant Mode)OJS-&) $rtt^?^l±Jt"o 
Sfe. ^^-i" 7.^7*^6) 7. ^'>/"?— I D (Stamper ID)$:K^5>- 

[0223] S1802 l::*3ViT, E®«^*l'^S"J1t^ 
^:bTCDx•^'7.i' I D (Disc ID) TSmiClE^^nTt^ 

;s,7S^i:e)*^s^a-r-2.= fH^$nT<.^fitt's i a o 3t- 

^.(Dy'-^T.i^ I DSttllSb, BE#^nTUncttn«S 1 
8 0 4T. ^>yAlc. =bb<«^e*^C«63£*^^:'t 
I D^^fiXb. xi'Xi7tciS®-r^o 

tC, S 1 8 0 ^X^-^^^-i: X^'>A- I D(St 

amper ID) Xi^ I DSrffll/^T. xi" 

Sr^fiX-r^. 5^^Xi'HW=^^-«5t{'ift^bfc<k^l:i. 
m^it. FIPS l80-lT^«e)6nTVi'5A-y ->3-MI&SH 

A- 1 ^m^^^:>jm^-:fciyi7mmzm'^<^^'y->^m 

[0 2 2 4] :;*ctcs 1 8 0 6«cjt^, ^ro— tHjoDlE®^ 

tODH^CDiit bTW^S'-r hJU^— (Title Key) 
fiXb, la^^:— F (Recording Mode) f77.-$' — =^—0) 

wRm'^tthizy'^ 7.^izM-r^o re®^— H (Re 

cording Mode) it. ^fifT^t»$SI5^^- F/O^, T^-iS' 
^Wfa®:^SC (Cognizant Mode)-?^^*^. 
tftfa®:^!^ (Non-Cognizant Uode)X$>^i)^^7ik-f, 

[0 2 2 5] :;*:ICS 1 8 0 7T, ifaWT^W X i7 H*=^ 
-t^'-f h^U^^-t. 'T-^'MVifim-^^m^- (Cogn 
izant Key) (x-rS'MWfa^^iC (Cognizant Mode)© 
«^) t>b<«x-iS'#M«Tia^:^Sffl+- (Non-Cogn 
izant Key) (x-^'*«iWffi®:^S (Non-Cognizant Mo 
de)c?5«^) -6^?>. ^'-r h;i'@w^-**fi£t--g)o 

[0 2 2 6] rJ'-l' h;i/H*^-0^^©#«ffl7D-^El 
2 4tr5^-r. H&^MS^Sl 5 0«. T^y^-yZTS 2 0 0 

faM^S^g§(73:/py^A^< iaS^fl^i§Srffifflt--5:i- 
•tfl:: J: ^ T A:'^ ^ nfcJi^x-iS' l^a-^'^^"!:*'J«^^ 

-5)0 _ _ 

[0227] S2001 Tia^^— h*75^V-i5'<8WI2^ 
(Cognizant Mode), TT'cCtit., Cognizant IB^CD 
X-x-;/>^S 2 0 0 2 tCjl*> x-i'Xi7HW^- 
(Disc Unique Key) ii^-fh}V=^- (Title Key) 
"f—Sfm^Umii^m^- (cognizant Key)^:*^?., ^ 
VyVW^"^— (Title Unique Key) $r^PKT^. 

) [0228] S2001 Tia^^— H*^x-^i^ft?wia 
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Si^o^ (Non-Cognizanl Mode), 'tUt:>'^> Non-Cogniza 
nt X^^y^S 2 0 0 31Cj1^7'-YX^ 

(Disc Unique Key) <h^-r (Title K 

ey) ^-^tmmmm^^m^- (Non-Cognizant 
Key)^7&^e>. N;i/@^r^— (Title Unique Key) S: 

[0 2 2 9] S 1 8 0 STfri. la^S^gBtiiB^t-^ 
Jg-e§ffir^o S 1 8 0 9T\ TS5aS^g:3 0 Oti. 

r-So fe^i^^tsae-sjjpw^cc I chATs. ^etc 

flfecDit^§Jia^^*)-l±fcfii«:#JP"r^o 'AlZ. S 1 8 1 
0T\ ATS*#J]nU;^cTS/^^^y h^M^SfSb. 1 

[0 2 3 0] 'Alz. mm&m^w^i s o\t. s i s i 2 

yp y^—>-K) <hS 1 8 0 7T'^^b;/c:^< hjl/H 

^(;):/D^yi:7(05^— ^'S:ffiP^^t■r^itT' 
[0 2 3 1 ] S18 13T^i. y'ay^^^-^m^^TS 

1 8 1 1 T-mfSLi^fcy^^ y ^ "T-is^ ^^mt-r^o u 

^^n^DES (Data Encryption Standard) T&^jgffl^ 
[0232] S1814T> ^mtLfzy'ay^'T — ^ 

^mmmmzmm^^. s i s i 5t\ ^x-^^ih^ 

a^M^TU, ^5^-^$:fE#UTV^^j:ttn«S 18 0 8 

[0 2 3 3] _tili(^5aa(cU;t;^^*oT. :ny^>y(Dm 
miB.my)^y'—^M^$i^y5^ (cognizant Mode) $>^^^ 
7'-^*«¥*flE#:^iC (Non-Cognizant Mode)a)(/^ 

— 5'MfffE&:^^Tt (Cognizant Mode) TUfir^n-S^^ 

\t. :3>^>y<Dmmt\zmm'^n^Sif)^^ x-^i?^ 

IES::^Sffl4^- (Cognizant Key)\zm^l^X^JjS.'^n. 
(Non-Cognizant Mode)XllfT^n^«^frS, Zi>^> 

- (Non-Cognizant Key) izm^^^^X ^jS,-^ Z. h\ZU 
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iCffl^— (Cognizant Key). $>^\^^\ty^—^$^MVxmm' 

(Non-Cognizant KeyXD^^^-ttifj^s I^— CD^^. 

[0 2 3 4] mmmn(Dm^s<^i5^ifn±'] a\z. 

0 16. mi 7^{z^vrz7.^>A-iDm(Dm^mm. 

10 mm^(7)m^^^^^^z^^^ti^^^^^fS.m\zr:>\,^xm 
[0 2 3 5] (m^(Dmu.izj:^mmmn±fS.) ^t, 

[0 2 3 6] El 2 5JC5fe&S^tS«(7)«$iA^^aS<^fc3?)C^ 
«^jA;?^^«^^^^IilH]8S«J5KSr*-ro 0 2 sfc^-r^ 

20 frf^i^^m^ih^^mnT^o 

[0 2 3 7] PLL[H]8&1 0 4 Iti, FGfS-^^a^PtC 

^^f&Lx^mm^<D^m\zm^'r^o 

[0 2 3 8] ^-f ^>^>?x^U~^ 1 0 4 2 fr^, 

y:^^jvc7uy^ cK^tj^yy hT^ztiz^D . m^(o 
mmmmxuj^m^^\^^ io45a-io45d^^?] 

iJfv^x^^l/-^ 1 0 4 2ti. l9]ffl{t/i;i'XS YlCl^^L 
1^ ffi 3^ - > i§#?ft-^ S T ^ ^fiK b T ttJ :^ -r ^ o 
30 [0 2 3 9] 112 SlC^f^iSIilgStC^fel^Tti. ^-V> 
:t^;U 57 D i7 C K IC^T LTl*g:(CiiH/^ tf *y h U~ hXX 

%^iEig& 1 0 4 3 ti, :S]ffi{t:A°;i-xs Yc7)iL_L75^*o^a 
L Tm^c?:> iwi ^ — > D Y ^ u T m :^ -r ^ o 

[0 2 4 0] M^^J^^dlK 1045a-1045D 

y^ cK^^xm\L-t^ujk¥\u 1 — M4 *m^-r^o 

CdTM^^JM l-'M4ti, yy^l>.\zmW{^f)^'&\t 
[0 2 4 1] fS^[Hl?S (X) 1 0 4 6A- 1 0 4 6D 

fri. :yL^ )V-yy^7m^\zX^mf^'^n. ^ti^ 
D^(^S:^S«^<:0#b'>y h b 0-b 3 (hx ^7 x ;i/- -> 
0. X^>/1- I D^OS^Stfffiti. M^^Jft^Ml'-' 

M4iCcfcosa^n'5o 

[0 2 4 2] a^^^lElgS 1 0 4 7iS. 2tf>yhOa^ 
(0, 1, 2. 3(Dl^Ttl7:^^CO{B) R^^^^-Jl^^ay 
50 i7CK^<4T'^^L, T^-^'-lrUi^^^ 1 0 4 8 lCffi:^f 
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-5. x-^-fel^i'^' 1 0 4 8«. iUkRcomizft^lS'Xm 
^IslK 1046 A~ 1046 D<DmM-i^i^'S:MifHiiiTr 

^. m^i-£n.1kR=0<Dt^MW\Bl^l 0 4 6A<Dmtl 

R=3(Dtt^nm^i 0 4 6Drom::'7a^<i:-r-&. 

ct-S-^SSr^lfrtr 1 0 4 6 A~ 1 0 4 6 DCD^Wf^M 

[0 2 4 4] x-^'-feUi^^ 1 0 4 9«, |pl«8/tiS'— > 
ffi^ST^S2picLT|qffi/1^'->%^illKl 0 4 3*^ 
?>miJ-^tl^mm/^i' — >DY. y^—^±.V^-S'10 4 

Oy^mmcom^M/'^^—>[ex. IIOIIDcd 

[0 2 4 5] x^mmzit. 
^m.mzm2 5i,z^-r^mm^izidi^^x±f$.^nrzmti 
*^»^ji*n-5, $^mm^tzxii^n^7.^>/t- 1 d 20 
m(7)mm^m'im-'C"h. u.mzit^i^xm^^^y'-^' 
mm-Amfi^z.tizts:^, ^oxii^cT^M^mL^asic 

[0 2 4 6] mz. ±m(Dmmxm^T^<^ntzm^mm 

PLLUlgSl 0 8 1 5=^^^ 

m\zmfjt^. 

[0 2 4 7] nmmmm^l0 8 2\t. =^^^)Vi?Uy 

{t/i;l/XSY*^^-r-5o Mlft^Jfl^di^ 1 0 8 3 A~ 

1 0 8 3D«. Z.<D^mitn)V7.SY . ^^'^-Jli/ay 

Ml— M 4 ^mtiT^. 

[ 0 2 4 8 ] (X) 1 0 84A~1 0 8 4D 

'tn^nM?k^\m^Ml--M4 i^^jin^fs 40 

^DX^*^LT*»^*^ai;'3-r-5o 

(X) 1 0 8 4 A- 1 0 8 4Dtt, MJS^J«#M 

1 ~ M 4 ©ifestt ic jj; u TT^-r ^' ;i'ff^«# d x 

i^^'Jl'H^fa-^DXtt. ^^J$;"r^MJS^JMl~M4^ 
S^lc U ita^ ic ck o T ® i^^IE L < ;^ n-5. 

[0 2 4 91 «iJ-|HlKl 0 8 5A~1 0 8 5D«, *lt 
(5)gSl 0 8 4 A~ 1 0 8 4DlCj;0tti;'3$n^mff^ll 

t:'tn^tmm\L>-^)\'7. S Y LTW^J-T-S C t 



5ijb 1 ~b 3©il&a«{clt^l;;tfis©^t^^•i^*$:^iJ;^J-r 
^, Naj^HK 1086 A~ 1086 Dtt. •f-n-5-'n«f5i' 
[gSSl 0 8 5 A~ 1 0 8 5DJ:iDI±l;>3;^n^«:$i-i^*S: 
Wm/'^^PX S Y ^amiC bT 2 {B^SUrs i: tc J: 

0 . >/1- I D^O$8^?E«ffi©#b*!y h b 0 ~ b 3 

[0 2 5 0] ±jZtiL7tJ:^>iC. X^>/1- I D^®*f:>S 
•It#g«. 4 My Vn=yV)V\iy h^Jb 0~b 3 i bX^ 
IBIil8& (02 5) \Z7<h^n. 4 ^iKCDMJ^yiJM 1 ~M 

m.n(^m.^m\^%Mx(r>m.^-^^timmt.u:b. mrz. 

W^B#tC(S|l«a/'?^->DY^a2p(cLTM?S^JM 1 ~ 

[0 2 5 1] ±iZl!C0lE®:^SC(CJ;0«g-jASn;t7.^'> 
•7">'ycDBt^®S«*^)5K-r^i5^?l*SBa. 02 6 

[0 2 5 2] (y'^:^i7f^mizmmmm'&mm) :k\z. 

I D^©a>^t»$S*«^j2i^. c:tl^7;i-— ;^7.•y■ 
[0 2 5 3] 02 7tJ. X'$'>n\ D^com^m^^m 

mLtcy'-c xi7^^-r§^m.mx$>^. x^>n—iDm 
oymmmmit. y'^x^<Dim\z4mmK>&L.mm-^ 
n. ^^mzmm^m^i^rzm^x'hmmmmcon^ti^ 
-^miiu^^oizmm-^ti^o mmmmt. ^^y-. 
7.9 yn- I D^co^^ffit^. ^ ^\z^X)t^i£M^tm 

^ >/i- 1 D cD«fa««t, K 0 fnE^3F^««^c: 3 :3 

[0 2 5 4] ^fc, X:$'>/t- I D^CDtt$g«t^. g^D 
2tf-yhx— rS' (bl, bO) il310 0©«-a-, 0 

2 7 (Di) ic^-rj;5!c. 9cm(Dm'>mi^(o^a)w.m 
m<n^^m^=^mit^^^-^'^. mm [i o o o] \zm 

^LXsimt^o (D2) 2\zyh'f-f' (b 

1 . b 0 ) IfeS 0 1 [0100]. (D 
3) 2 t'-y hx-^ (b 1 . b 0 ) 1 0 

[0 0 10] , (D4) 2h'-yha'-^ (bl, b 

0) lis 1 1 cD«^, [0 0 0 1] if^. cntc 
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+ 7i S *t 3t « Id J; ^ 7 * - ;<7 7. 1J— 7t< ^ nl i: U T 5r 
[0 2 5 5] 02 8tt, T^-i-^^i^l^SMl^tCiE^bfeX 

iaa#a«fiK*^b;t:inrfe-2). plleki i eo 

[0 2 5 6] |^^:^HBlHliiSl 1 6 1 «, ^A'^^JVi'O-y 10 
[0 2 5 7] 5'-f 5 >^''v'x^^U-^ 1 1 6 2«. WW 

[0258]:7U->:/7a-;/:/(FF) 1163 A~ 1 
1 6 3D«. . ^tl-?nit>:rU>i^/t;i/7.T 1~T4 20 

mEI?^«i®5^-iS'<^#2 t:>y hlcSiJD^T^c4^(Z)Si 
7 'J yy^D-yy 1 1 6 3 A~ 116 3D(C7y5^bT 

[0 2 5 9] S:*:fflfi^miil!S 1 1 6 4«. nn&4-:50 
^■;/^D 1 ~D4©:*:/hfiJ3£{CJ;D. ID, 

1-7=-^ (bl, bO) ^«-^LTttS;b b, /I^U'JUf^ 30 

UTJi/^j^iiiK (PS) 1 1 6 5«. m-A. m.±m.^m 

[Hl8& 1 1 6 4 J:0aj:'3$n^ 2 f.y hx-^ (bl. b 

[0 2 6 0] ±i:B©lBgi;^a:icJ;0«^jASnfcx^> 

Z-^— I DSr^^-^O, X^'>/1— I D^lcStiViT:3> 
7^>>y©Bt^ma»^^^Kf ^f2^S^^g«, H2 8 

[0 2 6 1] ZL<D^o\Z. r3>7=->U/<»:«S7^t-&#J*i^C 

/I- 1 D«5<Die:.^if^«tt;^5j0 7&iBi8T$)0, 

[0 2 6 2] ;^t*5, *WaB#(C*5l.iT«. T^^Xi^Jcft 



) i^P 2002-84271 

56 

^^$n-5x-f Xi7 1 D, 3>-x>u/«Jc:S;&-pTS:^ 

^tim.m7=—^. m^^m.m^'f^ 7.i7\zi^mt^%^. 

[0 2 6 3] ±.m\^tz.@mn^M\t^ El 6. 

01 7»C^TJ:^lc:, x— ^'^tlflB®:^^ (Cognizant 

^«?^fB©:^iCffl+- (Cognizant Key) ) <»:. 5^—5' 
t^M^W-Wcfj-^ (Non-Cognizant Mode)|ESffl«Bt^ 

^- (Non-Cognizant Key) ) iKDWJj^m^mzmm 

^mmm^m.m\zi5\^^x\^. i^-rti;!)^— -rts. 

t)%^—*^i^^sdMcf5iS.m=^— (Cognizant Key) , 

^t,iti-x-^#^^;pTlHgi:^itffl^- (Non-CognizanI Ke 

0 2 9, 030 . 

[0 2 6 4] 02 9tt, 5='-^'«f«Tiae:*5Sffi4^- (Co 
gnizant Key) 0*-€:Wr-&E®^^»«T* 0 . 

mzmmr^^mt^-. m.n^-^7'-:^mmmmy3 

^m^— (Cognizant Key) m<0^—±lS.'f—^tZS-^ 

[0 2 6 5] 03 ot±, y'-i$'^mmmm:f3^m=^- 

(Non-Cognizant Key) O^^SrWr-SfESS^^STS. 
ftl^fe^;^^ffl+- (Non-Cognizant Key) te<D=^^-:gfe 
[0 2 6 6] cn^©*54=^-1#iB^g«(C*3ViT«. 
[0 2 6 7] mRmm<DU^nfz-77.^-^—lZ.i:^ 

^^z^.xmmmmzmm■^tltzB^^it:^>v'>y^'^^ 
0 3 2~0 3 4(Dya-^^-h^mf'^xmm-r^. 

[0 2 6 8] 03 1 <D«ia:/P-;'i7 0Sr#SSL'i^j:*«e>, 
03 2lC55-r7D-5"-^— hJCtitoT, ^#«lSi3J:C^ 

n±9&m\zz>\,^x, mm<omn^mmr^> 03 2 ©s 

2 4 0 1 iC*3liT, Bimn±^m. 2 3 0 0 (0 3 1 # 
Si) Ii5^^-Xi'2 3 2 Od^^)7'-<X5? I D2 3 0 2 

U (pre -recording) IE®1M:-R;»#<hX5' I D(S 
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tamper ID) 2 3 8 0 Sr^^W l^, S/tg*®;)^^ U*^?) 

•tx^'— =^-2 3 0 1. ^-^mmm^yo^m=^-- (Co 

gnizant Key) 2 3 3 1 iSitZ/fe^^^^x-^^^WIB 
ii:^a;ffl4=— (Non-Cognizant Key) 2 3 3 2 Srgt^tB 

[0 2 6 9] ZfV (pre- recording) fE®itt'f^S#2 3 

6 on, ^J?)i5gti«#:T'*^7''CXi7tC*&^Snrc:x^ 10 
Xi7H*Ottf^«|gT^^c (pre-recordin 
g) 1«:ft#-^<t, 7'-^S'iS^B#CD-7X^-=^— Olttf^ft 
■rJ5:*3-fefB®Bttt:'f^»^2 3 5 0 S:JttiLTf?^S!l 
SWnJg^fiJPf VX^'— 4— 2 3 0 1 tt. 0 14 

CD D - ic J; 0 le^W^SMw ;^ ^: U \z.^m ^ tiWR'S 

- (Cognizant Key):feJ;yJ7^— ^'#^^«TB^^::^^S:ffl^- 
(Non-Cognizant Key)tt, ^ti^tL^—^'M^ (Cogniz 
ant) le^^:— H*3j;Uf5='— ^#^^tff (Non-Cognizant) 

[0 2 7 0] 3 o oa, -a^z. s 2 4 0 

2T\ X^-^^<E>m.^m^^^y^--^<^^-< h)l^ 

#{C^SefflLfcVXiS'-=^^-WlH:f^#-^ (Generation «) 

T:^c*5t.fH@^B#i«:'R:#-^2 3 5 O^tt^ffi-r. Aiz. S 
2 4 0 3Ti5t^l±S-r^#-x-3'7!)^S^Bjtg7!i^S75^^fJ:g 

[0 2 7 11 0 3 3<D7.'r'y-:fS 2 5 0 1 (CiJl^T. IS 

mn±^m\t. s 2 4 o i T-K^ffibfcyi^itf^*^ 

t. S 2 4 0 2T-^^»-tBL./tfE®Bt1«:ft«^«friaSr*J 30 
X^^yT'S 2 4 0 47bMS 2 4 0 9^£rX=^^>y7'b 

[0 2 7 2] fip-fc., ^IcoMliti. ^IE75^5£«LT. *«r 
SET. *ii1tt:f^cDVXiS'-^r-Jc*':^ViT, 

•So 

[0 2 7 3] — X-5^-y:/S 2 5 0 1 \Zi&\^-Z. Um. 
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-Pi W V X ^' — =1^— tca-rf ViTBS^^t nfc OT* -5 « 

T.'TvfZ 2 5 0 2 i'ili?^. IH^H^^B^. 
g # O y 'J b T ^ i •& Bt-^< f7 X ^7 - ^ - C © Itt 

f^W$g*Bi»b, -?-roiit#Ytvx5'-=^— wiftf^t, lit 
#l^1M:f^«?R*^«-rittf^$:Jt*!<bT, -?-Ott«©tfr«S: 

[0 2 7 4] X5=-->yS 2 5 0 2 (C*5UT. ^^UtCE 
ti:$nfcvx^'-=^-C®1M:f^;0i, Eftl^iftf^iS^*** 

b, X5^>y:/S 2 4 0 47!fSS 2 4 0 9*X^^-yyb 

T, n^M^frfy-f^z^M^^T-t^o 
[0 2 7 5] —-fj. 7.v^-jys 2 5 0 2 {C*3ViT. 
"J{cEt&$nfcB*^ft-7XiS'-4^-C®ift«;;5^*. ia@;B# 

^^:UlCfEtS$tlfc-7X^-^-COlftft75^\ lE^ 

X7^-;/yS 2 5 0 3 (Ciii^, E®B#09^:- K tC 

n^<t^m.. -rJic*3-fe5=^-^^*Tia&:^^ffl+- (Cogn 

izanl Key) fcb< (St"— ^#^WfHfii:^iCffl=^^- (Non- 
Cognizant Key)S. W:t«l§ie#/i^'0r^bTO^^*^<i:-5 

[0 2 7 6] X5">y:^S 2 5 0 3 iCiJV^T, iS^BtOt 
- FlC*fjrs-r-5liTafe-57='-i5'^WE®:^^ffl+- (Co 
gnizant Key) =b b < ttx-iS'#^Wfa^:^iS:ffl^- (No 
n-Cognizant Key)Sr, f?^«lg&i#*^^*bTViS« 

(T'-^^*fffiS:^^ffl^- (Cognizant Key)feb<« 
x-iS'#^«¥«fE#:^iCffl^- (Non-Cognizant Key)) 
S*t»Sg**^BlT*bTI/i7SI.>«-&, W^^BJtgi 

[0 2 7 7] f|^'5JtgiityJ^$n;t«-&«, X-f--;/7^S 
2 4 0 4lCjlt;<. S 2 4 0 4TH, T^-fXi'ID ®isc 

ID) iVX^'— ^— (Master Key) i:X^'>/1— ID 
(Stamper lD)^ffll/^T7^^' Xi^SW^^^- (Disc Unique 
Key) $^fi£2 3 0 2^-5. Z.(D^—^fSJjmt. 

FIPS 180-lT-Sse)e.nTV>-5/'N>y->:xMicSHA-l 
tc, VX5'-+— .hT^^Xi^ I D (Disc ID) iC5h*-y 
h»^tcJ;0*i5K$n^7'-^^A;^b/^©l 6 Ofcf 
•y hcD(±J;'3:*^?>£^Bi^t5^-^*'75i!*.S:x^Xi7@W+- 

(Disc Unique Key) <h bX<sefflT-S:^ft-^. :/D-yi7 
S&-^eiScS:-ffll'ifc/N'y->3.W^trvX5'-^— (Master 

Key) ty'^T.^l'D (Disc ID) ^XtiX^xmnfz 

VXiS7— 03 2©X7^-yyS 2 4 0 2TE&«jE 
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W^-- (Disc Unique Key) ^*^bTt>ctl^o 
[0 2 7 8] S 2 4 0 5T\ ^-f h;i^H*^— CD 

03 4JC^-ro P&#«flS¥a 1 5 0 ti, T.'ryySZe 

x^Xi77^^^)^^ttib/!:IH®^:— H (Recording Mo 
de) {cao%^T*fT$n^o 
[02791 S2601 lC:feliT. IH®^:- 

mvrmmjj^ (Cognizant ^o6e)'v$>^ ^mm^ntzm 

X^'^ys 2 6 0 2{C3t^, T'^Xi7H*4^- 
(DiscUnique Key) ^^^-f (Title Key) 

5^— ^»WfS^:^^ffl^— (Cognizant Key) <h . ^ 
< V)\^m^^— (Title Unique Key) ^^^f 

[0 2 8 0] S 2 6 0 1 iCi^V^T, IS®^— Ft^^^'-t^-^ 
#f«¥«ffH®:^^ (Non-Cognizant Mode)T*^<h^J^$ 20 
n/t^'&^i. X^^'^yS 2 6 0 3 (Cii^, -x^rx^HW 
4=-^ (Disc Unique Key) t,^ ^ h;!/^— (Title Key) 

"f-^^^m^WU-^^m^- (Non-Cognizant Key) 
t.ti^^. h;PBW^— (Title Unique Key) Sr^^ 
■r^o ^-^t^lcti. SHA- 1 $:ffl(/^^:^ffi-^>^n-/ 
ffg ^ { C S o < / ^ ^ 58 ^ * <se ffl T ^ o 
[0 2 8 1] iiiaCDittBJTii. VX^-^- (Ma 

ster Key) t: >yl— I D (Stamper \\^)t.'f^7.^ 
ID (Disc ID) Ti^^^-r'-r X^HW4^— (Disc Unique K 
ey) Sr^^L, c:n<hi$^< h;i/^- (Title Key) x 30 
-^^^fE®:^^ffl=^^- (Cognizant Key)t>b<tS^- 
^'*«fWfeS:^SCffl4^- (Non-Cognizant Key);!>^^^-r 
h;i/H^4^- (Title Unique Key) ^^n-^n^^T-S 
Jie^lCUTOi-^T;?^*, -x^Xi^HW^^— (Disc Unique Ke 
y) >^:T:S<hbTVX^^— (Master Key) h Xi$^> 
I D (Stamper ID)ch5'^X^ID (Disc ID) 

(Title Key) x — 37^WE&:^rxCffl^ 

- (Cognizant Key) t> L < ti5^-^^#«SWia^::^xCffl4^ 

- (Non-Cognizant Key)7&^e>il}* ^^-f h;i/H*4^— (Ti 

tie Unique Key) ^^fi£LT^J:<. S^c, h;!/^ 40 

- (Title Key) ^fflViffC^ v'XiJ'— 4^— (Master Ke 
y) <hX^>/t— I D (Stamper ID) (tx>i' X I D (Dis 
clD) 5^-:5'»*ffS®:^iCffl^- (Cognizant Key) 

L < li^"- ^ »^fH^:^a:ffl ^ - (Non-Cogn i z an t 
Key)7&^b5''1' h>/U@W+- (Title Unique Key) 

[0 2 8 2] ^JK\Z,S2A^^'l:'f^'7s^t^h^^Vc^n 
TfelS*3$nTVi'5ff&-^{tI3>^>U/2 3 1 2ti^^m^^ 
Uy{7^—^ (Block Data) ^^^ttSb. S 2 4 0 7 

:/D>;/^5^— r$'c^)^ll(D4;N*-r . so 
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H (Block Seed) Srirlxd^ 2 3 1 0 (CtiViX^i'glU * 
T. yp^;/^^^— H (Block Seed) S 2 4 0 5 

[0 2 8 3] :/D^yi7 . 4^- (Block Key) CD^^^ffi 
fi. ^l::mB.3bycH2 3cD«fi£^igffl-r^Cl<h7i?^*T^# 
<&o 'T/tCib'e^, 3 2 hoyD-/i7 • K (Block 
Seed) 6 4 e-y hcD5^-f h;l/H*=*^— (Title Uniq 
ue Key) Lt^^. ^ h<OZfUy !7^— (Block Ke 

y) ^^j^r^miSLtmrn-r:^^. 

[0 2 8 4] f^^. ±fEitt0JTt^5^^X^@W4=~ ®i 
sc Unique key) , h;UHW4^— (Title Unique Ke 

y) . y^uy^^- (Block Key) 

^B5iBJL^c^^\ fc^A«. Xi:7H;fl-^- ®isc Uni 
que Key) t^-^ h;l/H*^-- (Title Unique Key) <D 

(Master Key) ^ Xr$^ >A°— I D (Stamper ID) chx^ 
Xi7 I D (Disc ID) t^-r h)l^— (Title Key) 
^U-j^zy—Y (Block Seed) hi. t'— ^'^^f lE^:^^ 
ffl^— (Cognizant Key) L < ti5^-5'#^«¥«TiB@:^SC 
ffi^— (Non-Cognizant Key)^ffl V^T:/d ^ =^r— (Bl 
ock Key) ^^fiX bT ^> J: 

[0 2 8 5] y^u^y^^-ti^^^^n^ti. ;>klCS2 4 
0 8-^. yP^yiJ/^^- (Block Key) ^ffl V^TBt-^ft^ 
nTli^>^''D^;/i^^-^^a^2 3 0 9 -trl^^^:^2 
3 0 8^^M.Ttt^5='-i5'^bTm:^-r'5o t'cJi^B. ^-^ 
h^>X4^-I-X ^U-^*«^£-r^#h 
^>X#- hlCATS7&^f*SP$nT4i30. $felc 
itt0JLfcTSjaS^S3 0 OlC^fel^T. ATSClSr^X 

[0 2 8 6] z.(D^o\z. yD^y^:7^^4-tr0t^Yt^nfs 
,^ /7 _ ^ i X fft ^ { t $ n T I i ^ :/ □ ^ ^ — 5^ ^ m 

-^L. S 2 4 0 9T% ^'f-^^m,^^\^fz.ti^'^'¥m 

tiS 2 4 0 6\zmomo(Dy^-i^^^^iti'ro 

[0 2 8 7] tl^. iitibfcIH^B^gMti. E 3 1 {3 
Tik^J^oiZ. y'—i^mVxniWi^yj^ (Cognizant Mode) IS 

m-^^m^- (Cognizant Key) ) x-^I^^WfH 
Uyj^ (Non-Cognizant Mode)fB^ffl(Z)ff&^{t. mmiB: 

mm^fSimo)^- (^-i^i^mvjmm:^^m=^— (Non- 

Cognizant Key) ) hKDM'^^mnmiZ&.m^mum^ 
(Cognizant Key) . *'5l^fri5='-5^#^«¥«flH& 
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:^p:m=^— (Non-Cognizant Key) CD^5>.i£r*&fflUfc^§§ 

[0 2 8 8] \.fd.mmW\Z(D^mWi^7'-<T=^-^^ 

W^'ft=^— (EKB : EnablingKey Block) ^ 
ffl I ^ T ^fa^mS« (' T -7 X ^ - 4^- ftjH 1- > 

[0 2 8 9] TX^-^-tt^ ^©^.■^(C*5lt^5='-^ 

[0 2 9 01 einirjtb, IHS«#:«EKB (Enabling 
Key Block) ^fflliTejl|-r?.SS^. #:->X5"A(C*«<J 

So 

[0 2 9 1] 03 5 m 1 3 i:|^«ro^J^bT, ^ 

AW X0 75^*ia®i««:tcfei^$nTViS t ^^-aWEKB 
<!:S5J-7i^*feb*^U*^!irt>-T:^^^'J-"^^-K0 0 0 0 
t /— H^— K 0 0 0, K 0 0 SrfflV^THff/— K^— 
K (t) OO^^RgU, ■^n^fflt'^TMff;^^'^' 30 
-:K ( t) media*»S«l^^5%bTt^^. c:iT'f# 
fcK (t) medial*, -e©IB®J«<*:<^x— ^S'WE^' S 

[0 2 9 2] ;^j:4o, 0 3 5 tC*5{-t«.^HH^tH:ft#^ 
(Generation «n)li, 7^-l-*3''^TliVX5'- 
^-(DJ:^izWR<om\Bt\>^'^mitMt£^^(D1^'Jl!fm-C\t 

[0 2 9 3] ^mmn^mm\t. ^t^tt*, 

E®«<*:ffl©>^5^'r "7=^^- : K ( t ) mediaSrH-JSb. 
» l;: ^ K©i«#:'\ T -fe X ic^ffl r o 

[0 2 9 4] 03 6CDX7^-;/:/S 2 8 0 1 ®EKB©M 
*-C*-i:S 2 8 0 2CDEKB©J!lSli. ^n-?n0 1 4 
(DXy^yyS 1 4 0 SiJit^S 1 4 0 4i|p|«©«aaT 

[0 2 9 5] XT--y7^S 2 8 0 3tC*il/^TfS#W^iSfi 
Ji^T^-CT^-K (t) media^y-F=^^- K (t) 0 
OT-Bif^^tbfcBt^^CEn c (K (t) 0 0, K (t) 
ned\i)t:mmmm^^m.^Z-^^ X5"-;/:^S 2 8 0 4T' 5 
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[0 2 9 6] ^^IC. iS®i««:'vOx-^«fa®<0«iaS: 

»ii«-r-&;5i, ^x^7=^-lC4oV^T«VX^-^-®=t 
oizWR<^^\Bt\^^^m^Mfji^^o:>-z\ m, 1 ©^M^Jtc 

m g #*«t&S^-r S vx -^-rol&^^«Jtt!{lc -SIB© 

■rtAt)t>. 03 7 (c^T^iaS^n— oi^i::fj:-i>. 0 3 
7©mS7D-«. ^5^^7*-ogj#^S 2 9 0 IT 
i|aJSb, ^#$nfcJS-&lcco^^, X-x-y:/S 2 9 0 2 tc 

[0 2 9 7] [fa®iK#:{Ccr)*-W^?|75:^xi'T^-«:<£ 

fflbfcx— ^j'ODfssAas] =i>T->';/^— ^^©iH^iaa 

CD«^*, 03 8, 3 9CD:/D-yi^0*5j;I/H4 0W7 

[0 2 9 8] :^mmm-v\t. mKomm^^tmm, la® 

®j^#:-hC05='— bit-by-bit n tf — *l56<"rcS?>tr. 
fH©«E^H*(^^»m#g<!:bT©X'f Xi7 I D(Disc I 

[0 2 9 9] 0 3 8*5J;U.'0 3 9«, ^n-6n^ 1 «^ 
JS«nj(cfeltS0l 6i3J;tX0l 7 tc?=fjS-rSBIX-$.i3, 
(Master Key) <DRt)K>\Zy^'T-f T^- 
iUedia Key) A^•fie^^nT^iS-^^75^*ft?^^•pT*5 0, * 
fc, -TX^— comf^*5^'rfE®B#1M:^^#^ (Genera 
tion #) $:ffl0iT^i:^<tV\^dWcC-:5TViS, 03 843J; 
tJJ0 3 9 016, 01 7<D|IM<tIW|«l7'^'X 

[0 3 0 0] 0 4 o\t^y'^r^-=^m^^^^MMmtz 
8 (,^mmi) (oya—'^^-hiztnt^-r^. £xt. 0 

[0301] 04OWS32O1 IC43 ViX, f5®S^S 
S3 0 0 0«S#O/^:UlCt&^LXViS 5^— iS'^f^T 
Ba®:^itffl^- (Cognizant Key)*5i;U:/t> b < li^"- 
^'^^MtlflB^^iCffl^- (Non-Cognizant Key)<i:, 03 
6«S 2 8 0 4Xfl-^L. — ^MtC^^bXl/i-S^X-i- 
(t) mediaSrtt*-mT« S/t, T^fXi/Ti^e 
X^' >/1— I D (Stamper ID) ^tt-^tHT. 

[0302] S3202 tCiJl^X, lE^S^I^fittSE© 
a#: (Jtx-rX;^) 3 0 2 OlC^gim^ttXcT^x-rX 

i7 1 D (Disc ID) fj^iz^m-^nx^^^-fy^^'^^^^^ 
lest^nxvmtf, s 3 2 o 3x-^<735^^-xi7 

) ID (Disc ID) ^KttJb (03 8iCffl^) , lE^Stl 
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Xl^^Unnifi. S 3 2 0 4T, ^>t5^AlC, *)U<«fc 
ib^^Cisb^^^ntzZ^&X-'f^y^^l^ (Disc ID) ^ 

i7 I D (Disc ID) ti-iE-0D5='^Xi:7tct>^O^nticti/i 

Vi-rno^^Tt). ^iktCS 3 2 0 5 {CiitTo 
[0303] S3205 X\t. S 3 2 0 1 TK^ffi L^c 
pC5=^^7^— <h X^^>/1*- I D (Stamper ID)<i:^-fX 
i7 I D (Disc ID) SrfflliT. 5^^Xi7HW=^- (Disc 
Unique Key) ^^fS^-^^c ^^Xi^HW^-- (Disc Uni 

que Key) (DMci¥m^^f^:^^ti.x\t. m KDmmm 

[0 3 0 4] ::^ICS 3 2 0 6 (Cil^. ^CO— [HCDfE^r 
<hlC@WO^ : ^'l' (Title Key) ^^>^A 

^L;^ci:#Ofag^^— H (Recording Mode) ^x-rX^ 

[0 3 0 5] o'^Xi^itcti, EZ.CD'f-^t^Ehjf^^ 

yr-iJl-^^hK). ^(Dy Mz^-^ Record 
ingMode ^^mt^^^ti^X^^o 
[0 3 0 6] X5^^>:/S 3 2 0 7 Jb^S 3 2 1 5 t^gl 1 
8<?:>S 1 8 0 77iSS 18 15 «i:ig«T$)^fc*HttW^ 

[0 3 0 7] f^^. ±IH(O|ft0^Tii, p^x^y*- (Me 
dia Key) tX^ >/1'- I D (Stamper ID) X I 

D (Disc ID) T^^^^^r X^HW^— (Disc Unique Ke 
y) ^^l5Xb, :in<h^< hJU^- (Title Key) <h 
-^^tffS^^^iCffl^- (Cognizant Key) t> L < ^^■r'- 
^'#f«?=Wla&:^^ffl*- (Non-Cognizant 
h;i/H*^- (Title Unique Key) ^^n^'tl^^T^ 
J:e)l;:bTl/^'i)/^^\ 5^^Xi7H*^— (Disc Unique Ke 
y) ^^^«hUT^5^>< T^— (Media Key) <hXd7>/t 
-ID(StaiBper ID) ^T^'-f Xi^ I D (Disc ID) <h5^-f 
(TitleKey) ^-^«^fE^:^^ffl+-- 

(Cogn i z an t Key) ^i.<\t.'r-^ #^«¥«TlS^:^^ffl 

(Non-Cognizant Key)7&^6itS^^ h^^l^HW^— (TitI 
e Unique Key) ^^fi£bTfeJ:<. 

(Title Key) ^rffll/^-TlC. ^^'^T^^- (Media Key) 
h X^7>M- I D (Stamper mty'^Ts^lD (Disc 
ID) "T-^m^Hmyj^m^^- (cognizant Key)'b 
L<\ty'-i^0mViMmMm^- CNon-Cognizant Ke 
y)75^b^-f h;i/H*^— (Title Unique Key) ffl^COli 

[0 3 0 8] UiL±Oj:'5{c:LT, ;*x-< T^^-Srffl^^^T 

[0 3 0 9] mmimmzo)^'^i0}ts.:^y'^7^-^^ 
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[0 3 10] 04 Ul, |glCD||J60»JJC*5frt^E]3 1 (C, 
?SifNf ^EIT^O. -^X^^— (Master Key) (Ol^f:> 
0\z:^y'^y=¥— (Media Key) *^fiet)n, ^<7:>/!:<*fE 
^Btltf^S^ (Generation #) 7j^«BtS$nTl.^^.^7!^^'S 

[0311]EI42(^S3401 [C43(/^T> fS®S^S 
©3 4 0 0iifES«#:-C&^5='w'Xi7 3 4 2 075^e>X5^ 
10 >/t'- I D (Stamper ID) X ^ I D (Disc I 

D) ^r:i^^(D^^^j:^^^y'—^mvrmm:^^m=¥ 

- (Cognizant Key)4Dj:t>V*^(^^t^x— ^'^^^ffi'fE® 
::^55:ffl^— (Non-Cognizant Key)<h, |i|36CDS280 

4 Ttt»: \^-mm\z^^Lx\^^^^'f^7^- ^m^m 

to 

[0 3 12] fs^^. :i(Dmmm^<Dmxm\z. ^sec^ 
^la^ffi^^. :^y'4T^-^x^x^r^f}^z>rzm^\z 
\t. n^mm^rrtDnzmTf^o 

[0 3 13] :if^\ZS 3 4 0 2T\ "t^^ X ^7?^)^ ^^^ait" 
20 ^^^"^COi^^ h)l^— (TitleKey) t:Z<D^—^^ 

fE^bfcKcofS®^:— H Recording Mode ^tt^dtSTo 
[0 3 14] :;^ICS 3 4 0 3T\ Z.CDy^—^'^'^m^^^ 

x$>^^^^t^^pm'r^o s 3 4 0 3 (Dmm(Dmm^m 

4 3 (C^To 

[0315] XT*^yyS3501 7="^ (Me 

dia Key) ^#6n;/:t7^^S:^^*¥'J^t-^p T^- 
-S:»enfc*i^tiX5"'y 3 5 0 2(Cjii^c X5^';/ 
ys 3 5 0 2(Dmm\tm3 3<DS 2 5 0 3 <h|pjUT'$> 

^it (t'-^^^^^tE®:^!?: (Cognizant Mode)co:»'&. 
"r-iS^mmmmJj^m^- (cognizant Key),^— 
mVimm-^^ (Non-Cognizant Mode)<7)«^. 5^— 
»flfE&:^iS:ffl+- (Non-Cognizant Key)) ^n^WL^ 
f)m'DXl^^^m'^lZ\t rif^pjflgj ci:«»fbTX5=-*>:/ 

s 3 4 0 4 \zm^. -^ni^no^^tc^i, ^;fpj 

tgj tmmi^X. XT-^y^S 3 4 0 47!;MS 3 4 0 9$ 

[0 3 16] Ts^yZ^S 3 4 0 4 7iSS 3 4 0 9 <Z)4!aa 
40 113 2C0S 2 4 0 47!?MS 2 4 0 9i:ra3KI'C^^fc 

[0 3 17] ±m(Dmmx^'^. (Me 

dia Key) <h X^ >/t— I D (Stamper ID) Xi7 I 

D (Disc ID) ;^^b5^^Xi7@W^— (Disc Unique Ke 
y) ^^^U> (TitleKey) x 

-^^#fIE&:*SCffl4^- (Cognizant Key) t) b < ^i7^- 
5'#»*TlE&:^^Cffi4-- (Non-Cognizant Uy)f)^^^^ 
V)Vm^^— (Title Unique Key) ^^n^tl^fS.-t^ 
J:oizLXl^^t<. Xi7H:^=^r— (Disc Unique Ke 
50 y) ^^^<hLT;<^^ 7^— (Media Key) ^X37>/1 



( 34 ; 

65 

-.1 DCStamper ID) iix-f 7>i7 I D (Disc ID) hi^-^ 
hjW- (Title Key) t, 7'-^S?«TfE®:^;Kffl^- 
(Cogn i z an t Key) =b U < 1*5=^- WfH^:^i5:ffl ^ - 
(Non-Cognizant Key)A^ '=>ifiSE ^'-f h JUHW^^— (Titl 
e UniqueKey) ^^fiXbTt)J:<. ^;^c> iS'-f hJl/^- 
ditle Key) SrfflVi-ftC, ^x-i-T^— (Media Key) 
t ;;^,^>/'?— I D (Stamper ID) tT^f X I D (Disc 
ID) x-^^WfE^:^^ffl^- (Cognizant Key)fe 
L<li7'-^#^^«fEfil:ariS;ffl^- (Non-Cognizant Ke 

(Title Unique Key) ffl^OSt 10 

[0 3 18] ±fficoJ:^ifCbT> fH^it^^^^®^-^'© 

[0 3 19] mm^'imyz^vf^^^d.-wm ^x, n 

[0 3 2 0] fip-^. n>T->'yS:ia®l*'f*l'32gi'^-2)« 
tf-pJtg) rHf-LX^t,in>5=-> 20 

[0 3 2 1] ^Z.-^. ■^(Dj^'^UZi>'f>y<DZl}d—m 

[0 3 2 2] S-r, v'^';i'«^©=i>5" 

>';/S:, f5©l«»:lCfH^-r*«-&lC*5V^T«, 04 4 30 
(A) ®7D-5^-v- htCbfc50iofcBS^^i!LS*^fft)n 
^,04 4 (A) ©MSlt-C>ViTlttlBT-5. 01«fa® 

>^yy (x^->*^'J^3>7=->>;/) ieeei3 

94->'JT;PA*X^^^M.T. AtB::'^ I/F 1 2 0 
Stl-Si, T.'ryys 4 0 0 1 lc:feViT. Aai:^ I /F 
12 0«. ^(D'f'<'J'S')l'^>7->'y'^^^\^^ T.'TV 
ys 4 0 0 2 tCjitJ. 
[0 3 2 3] X5'y7"S 4 0 0 2 Ttt, AUl:'? I /F 1 
2 0«, SmL;tx-< -x^'Jl'=i>7^>'-^*^'^ =>tf-W«B 4fl 

F 1 2 0;5^*§mLfc:3>7^>-y75^B»^{t$nTt.ifi^^^ 

^yvffi. AW^'j I /F 1 2 0 {c#^*&$nfeii^) 

[0 3 2 4] ISg^S^^Ml 0 07i^-DTCPlc2p 

8e>©3fcf-SJPt»ffi<t:UTCD2 b'u/ h-®EM I (Encrypt 51 
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ion Mode lndicator)*<««$nTViS, EM I /i<0 0 
B (Btt, ^C!)t(F(Dfii*^2il|gCT?$)?>;ii:*«-r) 

3 >5^>>>'*^*=i tf- 7 U -CO ^) ©(Copy-free 
ly)T$)^:i<i:^*b, EM I 0 1 B-Cab^^-^tC 

ySl'i'b®(No-more-copies)T$)^^<i:^^'t"o $ ?>l'. 
EM I z&n 0 BT$.^«^tt. zi>T->^:/75^. iSfftt 
n If— LT^t'i'focO(Copy-one-generation)T$>-5 

EM I 1 BT$>-5«-&{C«, n>-T->>y 
f)\, n tr— 7&^^jt $ tlT is S fe W (Copy-never) Tfe •& Z. 

[0 3 2 5] 8£#S^^«1 0 0(DX\i^il I/F 1 2 0 
lC«i^^tTS«^tCEM I *«-^*n, -^-CDEMItS^ Co 
py-freely-^Copy-cne-generat ionT^^i^tClS, :3 > 

5^>-ytt3fcf-nrtg-eS)^<t«^$n^. ^fc. emi 

75^, No-more-copies-^Copy-neverT&S :3> 

[0 3 2 6] X5"-y:/S 4 0 0 2tC*3VsT, n>5">>y 
^i-jt;_pjtg-t?fj:i,ia:fij)£snfc«^, 7.-T--;/yS4 0 
0 3~S 4 0 0 5S:Xi\r-;/:/bT, E&«aS**^T-r 

[0 3 2 7] Sfc, X7"<y:/S4 0 0 2(c43tiT, :3 > 

S4 0 0 3JCjl*-, jy>T. X5"-y:/S 4 0 0 3~S 4 0 
0 5(C43V^T, 0 3 (A) OX5^-y 3 0 2 , S3 0 

3. s 3 0 4tc*3it-5ma<i:i^«®5as75^'fft)n^o -r 

•y hi'^ff SATSf^SD, Bt^ma^^l 5 0 {C*5i.t^ 

[0 3 2 8] fiii. EMItt< AW^I/Fl 2 0 {C« 

a>5=->';/ii:'£)»'> EMI, fe-SVitt, EM 1^:1^1$ 

^embedded CCIfj;<!:) fcES^tl^, 

[0 3 2 9] Z.(D^.. —ft&mzM. Copy-One-Genera tio 
n€r*-ritffiH. ^njJt±W3tf-«:fF$fj:ViJ:'5. No- 
iiiore-copies(C^l$$tlTE@^^'S» 

[0 3 3 0] *%BJCDEfilS^S«T-«. ^©EM I ^ 
embedded CCIf.E £©3 e-^JIJf TS/l-^-yhJ' 
f+JD-rsj^TESr-5. fiP-S. 01 0©«?iJ2^^J3©J; 
^{C, ATS<&2 4 e-y h;^cViL3 0 H-y a tf 

-feliaSW^^JDAfc 3 2 t*«y h 5:0 5 lc^-r«t C> tC^T 

[0 3 3 1] ^1^sl575^e©T-^-D^m^©=I >7^>u/^. 

C^«*l^('E#-r-5«^{C*3UT«, 04 4 (B) ©7 
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(B) (Dmmiz^^^xmm'r^. r-ru^mno^uy'r 

ii{c:fei/iT> "tcDT-ru^'ziy^yy^^mi^. 7.^ 
«y :/s 4 0 1 2 \zM^. ^m\^fz.T'ru^'z^ y^yy 

[0 3 3 2] Z.ZLX\ X"7^^>':/S 4 0 1 2CD*iJ^jaa 

m^\t. AtH;^ I/F 1 4 OTSffiL/cffi^lw, ^ 
^ntiva XMacrovision)^^-^. CGMS-A(Copy 

General ion Management Sys t em-Ana log) fB^7l)^^^tl 10 
^i)^Eoi)^\zm'^^^XfTf:>n^o MP'S, Vi7Dt:>^3> 

^ziy^yy\%. ':i\±-'^^xU^^t,m&^n^o 

[0 3 3 3] Sfc. mfL^l. CGMS-A«^ti, 

V ji'M^ o n ti-^jffli {cffl V i ^ n ^ c G M s m-^ ^ > 

:y;0^'zi tf'-:7 U — cDt)C7)(Copy-f reely), 1 Sfcttn t: 

— UT^V^t)O(Copy-one-generation), ^^t^izi tf— 20 
T&^'^ih^ nx l/^^ t) CO (Copy-never) (r>o%<r> \i^^tVX^ 

[0 3 3 4] t^oT, CGMS-Affi^7^>^\ Atb:^ 1/ 
F 1 4 OT§:mL:^cm#{C^^n, 7&^0, ^<7)CGMS 

— Afg-^Tl?^, Copy-f reely't^Copy-one-generat ion^^ L 
Ti^^^'&d^i^ T^uo'ziy^yy\^. ntf-oJtgT 
S'gxhW^^n^o ^;^c. CGMS -Am-^:?J)^\ Copy-n 

b: - pj t^T?^j: 1/ ^ <h $ n ^ o 

[0 3 3 5] -e^OAfri, -^i^Dtii^H >M-^t)> 30 

CGMS-A«^*), Affi:;^ I /F 4'Tr§«LrcM-^{C 

^sn7tj:i^«^{cts, T'ru^uy'Tyy\t. zitf-nj 

[0 3 3 6] A^iy 4 0 1 2 (C*5V:iT> T-^U^Zi 

yj'yyt'^^^fi-'^i&xf^^^^t.m'M.^ntz^^. T^j-y 

:/S 4 0 1 3 7!;SS 4 0 17 ^T.^v^fl^X. fS^^ILS 

^j^y-r^o t¥oT. z.(Dm^\z\^. ziy'ryy\^. la 
^SK^^l 0{cfE^$n;:cv^o 
[0 3 3 7] X5"*;/ys 4 0 1 2{C43V^T, 

D^Zi>5">^y;0^'a tl-pJtgT'fe^^*iJ^$n;t«^, 40 
ZT^^y^S 4 0 13 iCii^. i^T. A5^^y T'S 4 0 13 
TiMS 4 0 17 lCiDViT> 03 (B) (DT.'ry-ys 3 2 
2 7iSS 3 2 6 lC43frt^jaia«h[^«(0«!lS:?&^fTt?n, CI 
n(cj:0> '3y'ryyf)^^i:^9)vm^. MPEGt?-^ 

[0 3 3 8] ^j:*5. AtH:^ I /F 1 4 OTSmbfcT:^ 
P^y«^lr. CGMS-Affi^^O^^inTV^^-SS^JC^ 

<^)CGMS-Afi^t>. ii®j«^*lCfE^^n'5c IP"S. 50 
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01 OT'tSL/cCC I ^\^<\'t^(D^(Dmn(OU^\Z. ' 
Cl<Dfi^d^f2^^n^o CO^> — jgMtC^. Copy-One. 
-General ion$:^-rt»^fl, -?-ni^±(^:3 €:i¥$7i , 
^^Xo. No-more-copiestC^Sl$nT|E&^tl^o fcTt: 
>^X-7^A{C4DV>T;t<i: Afri rcopy-one-generation 
co=F ti-$iJ{W1tfgt^. No-more-cop iest-^}^i±T{CfB# 
T^jO^. No-more-copies<hLTS'5j t^Eo:>)\/—)Vti^1k 

[0 3 3 9] [S^«!lSfc*5tt^nfcf-SiJffli] SB 

uy^yy h\.x^mzn!iti-r^m'^\z^^^x\^. 1114 
5 (A) (^:7O-^^-hJ'bfc;0^*ofcS^«aS>e?^*firt5 

n^o 04 5 (A) o^afc^v^Titt^-r^c ^-tr^d 

X5^yyS4101. S4102, S4103{C*3 
liT> 04 (A) (^A5^^>yS 4 0 1 , S 4 0 2, S4 

o3\z:^»^^mt:nmo:>9!mffinf:>n. cn(cj:o, 
fs^^ff ^^^aj ^ n^cft^^tn y^y yt^^nm^w 

^gl 5 0{C:Bl^T^-^jaa;O^Vj:$n. T S 5aa;0^Ycj:$ 

ti^o ^Vmtmn^ntL'f^ ^J^)Vziy^yy\t.. )^ 

X 1 1 0€::^^bT, Attl:^ I /F 1 2 0{C#tJ^$n^c 
[0 3 4 0] Am:^ I / F 1 2 Oti. A'T-^;/:7"S 4 10 
4{C43ViT. ^ZL\zm^^n^'T-(i^^ jvuyryy 

«?lJAti, X^f} I /F 1 2 0 fCttJ^^n-S^^ >^i57;H3 
>7^>:y(::EMK fe^V^^i, EM I <h[W|^i{c=F t:-$ij 
fflit*c^,*^t-tS$B (nlf-^Jffll«$g) ;J;^*^^n?iv^«^ 
\z\-^. ^(Dziy^yyit. mxz2\i--pjmu^<DX&^ 

[0 3 4 1] ^fz. ^JA«. Atti::^ I/F 1 2 0 {C#tStS 
^tl^y"^ v^^;^=^>5^>^y^CEM I #(Dnhf-$iJfflltS 

TC Pcr)^*&{CL;^C/0^*oT, E M I ^COn hf-$iJPtt^ 

(Recorded EMI) ) tf— SjJPW^jO^ Copy-freely 

x$>^t^i.z\'S.. ziyy^yy\t. m:X:j\^-^mti^'b<D 

No-niore-copies-e^^<h#{CtS. ziy^-yy^t. ^ 

[0 3 4 2] ts^^. —^miz\t. mm^tirzEui^(D 

13 fci— $>JPtf ^5^^- Copy-one-generat ion-^Copy-never 
X$>^Z.^\tfs.^^o Copy-one-generationOEM I tilB 
&B#(CNo-more-copies(c:^^$tl, ^fz> Copy-nevercD 

EM I ^m-Dy"^ -j^jvuyryyM. mmmmzmm 
^nu\^^f)^^x$>^o fzfzL. yx'f'A\z:^\^^xrz^^ 

rcopy-one-generationCOn fc:— ^Jffll^^tl. No-more 
-copiestcS^itTiCfB^T'S)>0^. No-more-copies L 

xSl^} uii(D)i—j[^f)^»:ib^nxi^^m^\t. c(Dm 

[0 3 4 3] Af^^yS 4 1 0 4{C^liT, ayy^yy 
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5^.-;/:/S 4 10 5 iCjft^, Xmtl I /F 1 2 0 li. -t© 

[0 3 4 4] ^fz. T.f-yZrSA 1 0 4 (C*JtiT. 3> 
7>5"-;/:/S4 1 0 etCJt^^^. Aa:'3l/F120 

[0 3 4 5] fip-^. 0iJ;^«, ±ai®J:^t-> IH^^nfc 
EM I ^C0:3 t°— SlJ^^ItS^;0^> No-more-copiesT$)^« 
(feb<li, ->7.5^Aic43ViTfci:^tt' fCopy-one-g 
eneralionOa tf— $iJPtff^t4. No-more-copiesiC^j^ 
■a-riClBfi^T-S;^'^'. No-more-copiesa:L-T&^J ii^^^ 

I ^con tf— ^JtSHt^/&^Copy-one-generationT'fe'&* 
[0 3 4 6] At±l;^) I/F 1 2 Ott, DTC 20 

ffVi, ffl^AiiE^75:^«tr*^«^ dtc 

PW^^tcWL-AclS«T-$.^«^) lets. ^i'->*5';i' 
[0 3 4 7] ^tC, fE@«tt:lCffi&$nfcn>7=->^:/* 

-^tC^aV^Ttt^ 04 5 (B) (7)-7n-g^r- ht-U^^cT!)^* 

-Dtzn^v^mamf^n^^ 045 (b) a5msfct3i.^T 

itt^Hf ^. T.'r-jfSA 1 1 17iSS4 1 1 5{C*3Vi 

04 (B) ©XT--yyS4 2 1 7!»MS 4 2 5lC*3tt 30 

:hDii'n>7->^ytt, XtiJ;'! I /F 1 4 OTSW^tl 
[0 3 4 8] Xmti I /F 1 4 7.5^->yS 4 11 

o U J; ICIEST nTl/»7i£V^«^lC«. ^CC)n>5^>U/ 40 

[0 3 4 9] ^fc. :3>5=->U/(DfB&B$iC. fctxtSD 
TCPCD^+S!cLfc;6^'oT, EM 1 ^<Da tf-feJPWffi 
*^fS^^nfc:^-&(C«, ^rottffi*^ Copy-freelyt?fe 

[0 3 5 0] EM I m<D-3]d--mn'A^ti^^ No-m 

ore-copiesT-S)^«^. feL<«. i^7.y-L,\Zii\^^Xtz 
t^ii rcopy-one-generationW3 If— *dW^^li. No- 
more-copieslC^^1t-f'»cE®-^-2)**, No-more-copies 5C 
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T"CE®$tlfcEM I ^©n e— ftfJfflllt^d^opy-one-g 

enerationT$.^^^tr«. a>7^>:ytt, ^-Cn tT- 

[0 3 5 1] $?>IC. ^J^«, XtH:'3 I/F 1 4 0lC#t 

>y t Lt>\ZC GMS - Am^-^^tiSi^ ntzm^izit. 

-e© C G M S - A«^*^\ Copy-f reelyT$)S t ^ fC 
-&tf«J^^n-5o Sfe, CGMS -A«-^75^\ Copy-nev 

[0 3 5 2] X5">vyS 4 11 6{C4ot^T. =i >5">>:/ 
S 4 1 1 7 (Cit*. Atb::'? I /F 1 4 Ott, ^ZLiZ^^ 

[0 3 5 3] ^fz. X^-;/7'S 4 116 (C*3V^X. =1 > 
7->;/yS4 1 1 SJCit*., Am:'! I/F 1 4 0 T:?" 

[0 3 5 4] mt>. m^i^^ ±m<oj:i^\z. mm-^nft 

EM I ^©n tf— fti|PW$g75^*. No-more-copiesT$>^« 
^ (t)L<lS, v7.^Atc4oV^Tfcci:;^('i fCopy-one-g 
enerat ionron tf— SlltWWffiti. No-more-copiestC^^ 
1±-r{::fHfik"f^*^ No-more-copiestUTS-pj iii'^e* 
)V—)l7i^^!st><bnx^^X. ^(D^f^TXei^'^tlfzEU 
I h!— $iJPttfS7i^Copy-one-generation-r$.-g)^ 

[0 3 5 5] Z-CDtzeb, Adi;'! I /F 1 4 Ott, T:^D 
^zi >5^>iy^Sr. ^niz. ^JAti, -^i^D fv'a >«-^ 
■1^, Copy-never**-rGCMS-A«#<£-f*»nbT, 9V 

mzmtiT^. ^rz, -^ja^, iE^$nAcCGMs-A 

m^^^^ Copy-neverT$)-&Jl^lCfe. 3>7^>'>'li, 
na±«3 if-«fF$n;^jv^<. Z.(Dtz^. AttJ^bl/F 
4tt, CGMS-AW^^SrCopy-neverlC^MUT, T:J- 

u^-3y7-yytiz-h\z. ^mz^irt^. 
[0 3 5 6] JJi>±©=kp(c. a>5^>'7<75r3tf— $iJP^ 

[0 3 5 7] [x-^mS^^WlSsK] ^'ctis, JijzEU/i 

— Mw^aigtt. j\—Y-0x.7\z^y)'fioz.ii\-x^m. v 
^mm^WL 1 5 0 ittmmt/mn'L s 1 1 lx^br-t^ 
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V < i7 D a > hf ;l - ( C :r □ ^ A ^ * fr $ -l^ ^ C t 
[0 3 5 8] y'U^^Alt. :3>}:fzL-i^\Z\Hm^tlX 

yacr^2^\tyuy\^- imimmm x^xi/, cd- 

ROM(Compact Disc Read Only Memory), MO (Magnet 
0 opticaI)5^>< Xi:7, DVDCDigilal Versatile Dis 
c), a^x^Xi/, ###:^^:U;^i:i:(^U A-Ay;HE 

[0 3 5 9] ^c^. T'D^S^^^AJ^, JiifiLfcct^J^^U A 

-A*y;l/|5®<«^$:4 2 1 0 7;;^^=3>t:rL-^{c-f >X h 

UfcO, LANdocal AreaNetwork). — h 

<^ya^^A*, il«gS4 2 0 8T§«U, rtMT^ 
/N— X^4 2 0 S\Z^ y7.V-)i''f^^i:iti^X^ 

o 

[0 3 6 0] i3>tfrL — CPUCCentral Process 
ing Unit)4 2 0 2*rtja[UTVi;5o CPU4 2 0 2J:: 
;>CX4 2 0 1 ^^bT. Al±l:^'1' >^ >'x-X4 2 

1 1 f)mm.^nx^ D> CPU4202ti, Aai:^-f > 
^yx.-y.A 2 1 O^^TLT, :i-if [C<i;oT. 
-K^Vr>X^T«fiK$n^A:^gB4 2 0 7 7&tJSf^$n 

^z.^\z^y)^^f)^xti^n^L. ^n\z\^tz'h^'ox. 

ROM (Read Only Memory) 4 2 0 3 \Z^^'^nx\^^^-f 

[0 3 6 1] fe^t^ti. CPU4 2 0 2tl, /S—Vy"^ 
7.^7 4 2 0 5 {Ct&^^tlTt^^ y^Py^A. S5M^b< 

hy-^t^^u^^n. ii«a54 2 0 8ts«^ 

tlTA- Kx^ Xi7 4 2 0 5 JC-f >X 1 JV^ntzZ/u 

^^A, S^tJlH^-f :/4 2 0 9tcS«^nfcU A-A 

yj!/ia^a^*4 2 1 0 7^^est'5^m^nTA-H'7='-Y 

4 2 0 5lC-f >Ah— ;i/^tlfc:/D^^A^, RAM(R 
andom Access Memory) 4 2 04ICD— K LT^fT"^'2>o 
[0 3 6 2] Ctl(ZJ:0, CPU4 2 0 2(i, ±izKLfc 
yu-^^r-h\Z\^rzi)^'Dtz^^. fe^l^ti±aibfcy 
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PU4 2 0 2«, ^OjfflSJei^*. 'iJSJCfSU^'r. 

Atil;^^ >:5^:7x-A4 2 1 1 $::frUT> I.CD(L 
iquid Crystal Display)-^A e — ^^T^tfiK^n^ttl:^. 
gP4 2 0 675^6ttl:^. ffi«aB4 2 0 8 y&^?)ill 

«, A-Ht^^t A^4 2 0 5(CfS&^i5:^o 

[0 3 6 3] CieiT. *HJ^»tCfeV^T, -=l>tfzi.-^ 

[0 3 6 4] *fc> yPi^^^AtS. l(7)a>fcf:x — 

[0 3 6 5] fct^o, if^mM<ommx\^. zj>y->y(Dm 
-Ls \xmj&'t^m^^*ht:\^xmm\^rz.ti^. :=i>'r> 
r;^Ei2{c^-rc pu 1 7 ot^mn-t^ i-dcd^j^ v^x, 
ic, Ts^aa^ss 0 oosas^^cpu 1 7 O/O^^siff-r 

[0 3 6 6] [fE^tiS^coMitgB^J:^^':^^] 

[0 3 6 7] mA7\Z\-X. flS®«fr^«ifiT^ch*(C. 
30 fS^<«<^lC*fbT^>r A^ I D (Disk ID) , W^^L^— 
:7'D'yi7 : EKB (Enabling Key Block) ^XXS. Bt"^ 

[0 3 6 8] C1O0 4 7 (C^'TT'-r Ai^SiiSSM^i. El 

s L 75: 1/ iM5i:xg fc ct 0 K \zm.^\LX e nx I i ^ ft® 15 

&«<*lC*tUT, 5^^A^J7ID (Disk ID) ,^mt^— 
y*U>y^ : EKB (Enabling Key Block) ^^ZS. 

40 ^t>CT'v'A^-'4^--c07'U (pre- recording) lEStaif^ 
tt^ (Generationtn) t)Wi±TfE®T^o 

[0 3 6 9] Ai7®JifigM4 3 0 0«, ^ 7.^ I 
D (Disk ID) .^^Vc^—yuv^ : EKB (Enabling 
Key Block) ^^iS. Bt^ft$nfcVA^-+— S/ctl 

4 3 0 2 fcL<(l^<D{tb(OlEti^S^:. fE^j«<*4 
3 5 0 (C*f-r^^^«#*fT^iH@«(2^ I / F 4 3 0 3 
{feOSfithO I /F<hfcC'5Affi;^ I /F 4 3 0 4 

-^ne^^JPt" ^^Jffiigf54 3 0 1 , cne>^f^j^-r 

50 ^/\*A 4 3 0 5 ^{i;^TV^^c 
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[0 3 7 0] U^. 04 7<D«|^T«. 4 3 0 2 

^jium»mi^ I / F 4 3 0 4 mmnmmm\z[*^m. 

$nTt^^«aJ5r^tfTVi-&75^\ ^^r'J 4 3 0 2id^Ua5. 
1/^4 3 0 3 «it#^tCDfcCC)T$.-=.T*jil,io 
[0 3 7 1] ±m<D7'^7.i7 I D (Disk ID) 

— :/P-yi7 : EKB (Enabling KeyBlock) ii^U. BS 

(pre -recording) Efiilftf^'lt^ (General ion#n) JJ, 

[0 3 7 2] JiE;<^'J 4 3 0 2 lC*&«rt$nTViS'7^-i' 
Xi7 I D (Disli ID) ,*^{t^— 7*n-y i7 : EKB (En 
abling Key Block) , T.^Z^n— I D^W^&^tf IS*3 J; 

T^-«, *ijffll^4 3 0 1 0«iJfflI®T, fS^ffliW*: I / 

F4 3 0 3*irM.Tf2Mlj«#:!'8a#$n^„ /j:*5, i5g 
ICitNDTVX^— CC>:/1^ (pre- recording) Efilffi 
■f^tt* (General ion#n) iCOViT'folBS^-ri., 20 
[0 3 7 3] U^. X:?'>/'^— I D^CDSS^t»^«. W 

;ttfS2 5, gl2 7^©«fiX&jtt3tt<SW^^fiXMS# 

[0 3 7 4] ifc, t'w:^^ I D (Disk ID) .W^-ft^ 

— :7*D-y^ : EKB (Enabling KeyBlock) i5j;I>\ BS 

TX^-^^^-wru- (pre-recording) fB&1fl:«;« 
Wl (General ion#n) tt. ±aiUfecfc'5<C:;)t^:'J 4 3 0 2 

ic €> u $ nx * CO -ri) xTic 
<, fciA^AHJ:^ I/F4 3 0 4^;^^bT^t%^f-fe:> 
^ *i e. it e. nr # ;t ® * A#r ^ c <»: t> BjtgT* ^ , 
[0 3 7 5] 04 8ic«. :^mM<Dmm.mwm.mjjmL 

X'f^T.i^ ID (Disk ID) . ^g^j-ft^-yo ^ : EK 
B (Enabling Key Block) ^^JS. Bt^ft^^ nfc v'X^' 

CDT'l/ (pre-recording) IH^tS-f^'tff^ (Generation* 
n) <£rfESir-5fE^««:Mie::^ffilC*3tt^«jfiIg®SS 

[0 3 7 6] 04 8(Ci5liT. flH^«K^*:Sjt*ffi-e«. 
^r. XT^-y^S 4 4 0 1 coSifilStLT. El^Lfi 

[0 3 7 7] )!k\Z, 4 4 0 2 0^itISi:L 

S4 7CDfSSti«#:^]t^glCJ:f3. SSit^nfcfS^ 
ffi#:tCMUT, X'CXi'ID (Disk ID) .m^mmitV 50 
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T©X;S'>>'1— I D(SlaiDper m.^mt^—-:/Uy 
i/ : EKB (Enabling Key Block) i3J:Z/, Bf-^ftSn 

Ix (pre-recording) EgHftftW^ (Genera I ion#n) 

[0 3 7 8] iy.±co^^'Xi7SjigMS>^n-b:XtcJ;D, 
IBgl!«^«, -T^^Xi^ID (Disk ID) ,mm\l=¥-^n 
'yi7 : EKB (Enabling Key Block) *3j;t;C, Bf-^-ft^ 

^—<n-fV (pre-recording) ESHSfettPffi (General i 

on#n) SrlH^Lfcft. MjtXiK7!>^Sm?Sf^n-5, 
[0 3 7 9] ;^£*3, jK-?^+»ISi:LTfaS^T-5c75«X^> 

[0 3 8 0] [EKBCDy^-'^^yh^i B4 9{cWm 
^—:/u>y^ (EKB : Enabling Key Block) (Dy:t — 
h^J^^To /\*->^3 >4 5 0 Ui. ^mt^-y" 
ay^ (EKB : Enabling KeyBlock) >^3>^ 

^-rstS'JT-Tfe^o 0^7^x4 5 0 2ti. ^mt^-^u 

(EKB : Enabling Key Block) C0E^5feCD-=r;^^ 

4 5 0 3ti> ^mt^—y^Uy^ (EKB : Enabling K 
ey Block) '^•cD't'— ^J'SPcDfirB^^TJ}^^ >5^T& 0 . 
5^^#-r>i$^4 5 0 4ti^i^g|5<^<4g. «^,3l^-1'>i$^4 

5 0 5(i^^,co>K®^^r#-r >5'T$>^o ^a54 

[0 3 8 1] 5 0 7 ti, 5^-^S|5{C*&ft*3$nfe 

^BT-So gISOTti, ^^'-^.tbT^fetC^l 2 (A) T 

mmLrzmmt=^-yay^ (ekb) ^in-f^-r^^j^ 

^ti, ;i.-h^-coMSf^-K (t) RT^^'^StiTV^^) 
c;DT\ h^;/>^y-K7HUXt^KR(h;^j:^o 
[0 3 8 2] fft-^<t:^-<^S±g:(^)5='-5^ E n c (K 
(t) 0, K (t) R) ti. ^5 o<^fe<^pg)g:y u— 
^T^iBtc^^o c:;!^. :kcoy^—^\t. E n c (K 
(t)oo, K(t)o) u-±7r^imjcox 
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0. l*<S3t$nS, i>if\t (L) ^ 

y, * (R) i'if) tbT^S^h^. m±.Wc<r)'r—'^ 

Enc (K (t) 0, K (t) R) O^EiC^T^— ^'d^*^ 
■5»T\ L^5^=0, ^yO^YjViCDT. R^S'^ 

05 0 (c) \z7^-r7'-^m. ii^u^ifmtmfSi^ti 

•5. 

[0 3 8 3] •;/'J-Oy-h*MacOMM«tLT. 1^— S 
©♦i:>?|6]€-5felCjaST-5liifi5t (breadth first) SSLS 

gil$::^[6]^&$fetc^!aa-r^gil$ffi5fe (depth first) 10 

[0 3 8 4] B14 9{CM-:>T, E K B 7 "7 >y h tCC? 
ViT$e.{CiftlB-r^. (Signature) ^mt=¥ 

-y'Uyi/ (EKB) ^fEfTL.fc^Jx.«li^a-fc:>i5', 

^Jit*3!l{t=^^-:/a';/i7 (EKB) ISEff^Ti^^Efi'Lfc* 
Wt^--y'Uy!7 (EKB) TS^Cir^ttlg-r^o 
[0 3 8 5] £/L±. #5tWSIJg«aJ^#S8L.7^£7>^e.> *5I 

^Mm<D^-^^ ^'^um^iT'-^. 'm^fmm^y' 

!|t W«d?cO«eii ©«B *#S)-r ^ T * S . 
[0 3 8 6] 

[0 3 8 7] ife, :^^moimmz^\i^x\t.. 
AWT.. TUio-^mmmmff^m^MLoyjm^mff'^^u 
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[0 3 8 8] ^fz, ^^m<Dmmz^tn^. yv- 

7^-(Dmmy'—$'t:m^sfiit^-Zfayi' (EKB) ii 

n >x > <7JfiJffl niffi <i: ?ic -S o 
[Elffi<©ffi^fj:i5iBJ] 

[Ell] :$^^m(Dmnmmn±mm<Dmi&m (^«i) 
[0 2] ^^m<ommmmn^mm(Dm^m (■?-w2) 

^t" :/ P -y i7 El T- S -5 o 

[El 3] *MHJc75m#ia#fl^S@«5^-^fB^MS7 

[0 4] *f6IBWtiffifB®H*S«05^-iS'S^^!aS-7 

D — ^^TE1T-^)1>. 

[0 5] :^^m(Dmm.w.mn±mmiz:hi^^xmm-^n^ 

im 6 ] ^^m<Dmmw.mn±^m\,zin^^ h 7 >x7i? 
-h-y;h>j-A (Ts) f&m^wc<Dmis.^^-r-:^oy 
i'0-rfe^. 

[0 7] 2|s:f£?«©t»«ia®fl*S«ICiiUT«!ia$nS 

[0 8] /ti:%IBOit^fa^fl^^StC*lt.S h^>Xitt 
— h-XhU— A (TS) ^!lS^e©«figSr^-r:/a-y 

[0 9] :^^m<Dmnm»n^mmizidif^h^>xyfs 
-h-xhu-A (TS) mm^'^<Dm0S.^7^-rzray 

[010] ^mM<Dmmmmn^mmizioi^xmm^rL 

««B£C»y *t" 0 T ^ . 

[011] *%l80«^BE@S^^g<cM-r-&-7X^'- 

[012] *%i^«t*«EilW^ISBtc*fT^vx^- 

-:rn-yi7 (EKB) O^J^5^-r0t?S)-5)» 
[013] *%wro«^ESiS^«HJc*3^t-5-7X^'- 

^-ow^ift^-i/D-yi' (EKB) ^mmLfzmiBm 
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78 



^-com^it^--:^a-y^ (EKB) ^mmhramme^ 
myu—^Tjk-rmx'&^o 

iB^Ms tc i5 -5 V X 5' - ^- o ittfs jtiiE^aa 7 D - 

[1116] *:%BJ©tt^fE®W^S«(C*3V^T. 5^-^ 
1) Tfe^. 10 

2) 

[0 18] *%HJ©tt«fa®lf^g«ICfcViT, 5=^-^ 

[01 9] :$imm(omm.mmn^ms\zi3i-f^y'^xi7 
[0 2 0] *5iBjc75tt5^ia®s^gg{3*3ViTMs$n 

^feiHl 3 9 4 /l-fr h (C^ott ^ E M I ( 5 C 

DTCP«*&) S:^-r0T*-5. 20 

[02 1] 2|s:%0J(7Dtt$gfE®II^^Btt*3tt^=i>7=-> 
>;'fE®5:-f'— ^'^Wia®:^^ (Cognizant Mode)iCj;-D 
T*ffT-57!)^. y'—^^mmmm:^^ (Non-Cognizant 

Mode) -r^ff -r s d^^st^-r s y n -ir X -5 7 D 

[02 2] :^mM(Dm^mmn±mmiz^'^^x. x-^' 
lE&B^o^-r h;i'S*-4^-©^fiXMs«aj^*'r0T"* 

[0 2 3] *f6BJoWfgfeaw^l^Bic*5tts:;^D>;/i7 
• ^-<D^fi£:^ffi^8Ji?«T-50Ta&^, 30 

[02 4] :^^m<Dm^fd.mn^mm\z^»^^'i h)i 

[02 5] *^BJ©tf^iB©||^gg(C4olt^X:$'>/t 
[02 6] 02 5 (C5^-rx^>/t- I D^W|g>^W^C9 

[02 7] *%^®it^fa@s^setc43ttsx5'>/'« 

- 1 D^cDm^^^^(Dmmmmi^^-rmx$>^o 4o 

[028] 02 7 \Z^-r7.^>/-^- I D^CDiK^ttlSW 

[02 9] *:5!BJ©WfgfEeiB*igBlC*5{t-5T'-^'« 
0Tfe-5. 

[0 3 01 *%W©fi|^faMlS^g«JC*5lt^7^-^#^ 

■r0t?$.-5. 

[03 1] *%W©««IEilS^S«IC*51.iT, 50 



[0 3 2] ^mM(Dmmmmn±mmiziii^x, t"—? 
[0 3 3] ^W9\(D>^mw^n^mm.\zii\^x. ^-^ 

[0 3 4] *^aj©t»5SfE^S*gB(C*>liT. 7^-5' 

[03 5] *%0Jc7)«^fE^S^g«(c*j(t^/5^^7 
^-®#5e!l<t+-yD-yi7 (EKB) ^mM\.tz.WMm 

[03 6] *^B^Wl»$gE®f?^fegHiC*itt.5>C5'^'T 
^-®*Je!){t^-:/D.y/7 (EKB) ^isefflbfett^m 

a:7 D— 

[037] i^^^(r>mmmm^m.m.\z^\-^^ y t 

•5. 

[03 8] imm<D>f^mLWsm^^m^zii\^x. ^^f^ 
f^ya-i/^^Bi (^<Di) -r*^. 

[0 3 9] 2t^^0^©1»«BE^S^^«tC4oViT, 
74^-Sr«effl Lfc7"-:S'IB&«!l3g^<DBt#{t^a<&i5iBJ 

■r-5:/n-yi70 (-ecD2) Tfe-5„ 
[04 0] *%BJOtt!^lH^?|^^BiC*5liT. p^T^^ 

[04 1] *5!BjCD«^fEeS^»«{C*3t,iT, 

[04 2] :^^m<DmWimmn^mm\z:h\>^x. ^x^- 
T 4^- b ^5=^- ^ s^^aa Sritt^-r -5 7 a - ^ v 

[04 3] *5!?BC9«ffiESlS*iiBlC:}3t.iT. ;<t^^' 
7 ^- & ^ffl L Ac 5=^- ^ ff ^Ma tC *3 ^ nrtBtt*lJ 
^MacO|¥*i<£:^-r7D-5^-V- hT35^. 

[04 4] *^Bj05lf^E^|?^^Htc*tt^5=-^'ffi 

gima»<D:3 tf-Wfflijaa^ifiia-r-57 hT' 

[04 5] Bj CO ttfgEg^S^SBtciJtt^ 5^-^11 

[04 6] *%B^CD«$gE®W*^BtC*5l^T> T^-iJ' 

«!ia* y 7 h '^7 1 T {c J; o T^ffr-sj^^oma#&« 

fi£S:*bfcyD-;/^0T*^. 
[04 7] *%?g©tfl«Eei?^S«{C*3liTffiffi$tX 

[04 8] :^^m<Dmm^mn±&sizii^^xmm^n 
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(54) Encrypted information recording 



(57) An Information recording/playback device 
stores beforehand, on a recording medium, secret infor- 
mation In which a writing/reading method thereof cannot 
be analyzed and which can be read only by a special 
reading method. The secret information is applied to a 
key for content encryption or decryption when perform- 
ing recording or playback of contents on the recording 
medium, such as music data and image data. The secret 



information is, for example, a stamper ID. By using the 
stamper ID as secret information, and a master key and 
a media key which are distributed in a tree-structure key- 
disthbution system, a content-cryptosystem key Is gen- 
erated. Accordingly, each content Is allowed to be used 
in only an appropriate device in which the special read- 
ing method for the secret information can be executed 
and to which the key is distributed by the tree-structure 
key-dlstrlbution system. 
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recording device. The decryption- key-genera ting data 
may be updated by using an enabling key block gener- 
ated such that a node key is encrypted by using a key 
including at least one of a node key and a leaf key which 
are positioned at a lower level. 

[0032] The decryption-key-generating data may be 
one of a master key common to a plurality of information 
recording devices and a media key unique to a specified 
recording medium. 

[0033] The decryption-key-generating data may cor- 
respond to a generation number as updating informa- 
tion, and when storing encrypted data on the recording 
medium, the cryptosystem unit may store on the record- 
ing medium the generation number of the decryption- 
key-generating data as a recording-mode generation 
number. 

[0034] The information playback device may further 
include a transport-stream processing unit for adding an 
arrival time stamp to each of transport packets consti- 
tuting a transport stream. The cryptosystem unit may 
generate a block key as an encrypted key for block data 
composed of at least one transport packet to which the 
arrival time stamp is added, and in decryption of the data 
to be stored on the recording medium, the cryptosystem 
unit may generate a block key as a decryption key based 
on data including the secret information, the decryption- 
key-generating data, and a block seed as additional in- 
formation which includes the arrival time stamp and 
which is unique to the block data. 
[0035] The secret-information decoding unit may be 
structured to execute decoding processing on data 
which is stored on the recording medium by using a bi- 
nary sequence to disturb a string of bits constituting the 
secret information, and the secret-information decoding 
unit may execute decoding processing of the secret In- 
formation by generating the binary sequence and exe- 
cuting arithmetic processing using the generated binary 
sequence and a playback signal from the recording me- 
dium. 

[0036] The secret- information decoding unit may 
read, from the recording medium, data which is record- 
ed in a form converted in a predetermined manner from 
the secret information in units of a plurality of bits con- 
stituting the secret information, and may execute decod- 
ing processing on the secret information by converting 
the read data again. 

[0037] According to a third aspect of the present in- 
vention, there is provided an information recording 
method for recording information on a recording medi- 
um, which includes a secret-information decoding step 
which reads secret information stored on the recording 
medium by executing a special data-reading process 
which is different from a process of reading content data 
stored on the recording medium, and a cryptosystem 
step which generates a content-encryption key by using, 
as a key-generating data, the secret information which 
is decoded after being read from the recording medium 
in the secret-information decoding step, and executes. 



based on the content-encryption key, the encryption 
processing on the data to be stored. 
[0038] The secret information may include a type of 
data among a stamper ID which is stored on the record- 

5 Ing medium when the recording medium is produced 
and which is common to a plurality of recording media, 
a disk ID which is unique to each of the recording media, 
a content ID which is differently set for each content, 
and a cryptosystem key, and the secret-information de- 

10 coding unit may execute a decoding process on the read 
data. 

[0039] The cryptosystem step may include a step 
which uses the read secret information to generate the 
content-encryption key, and the read secret information 
'5 Is allowed to be used only in the generation of the con- 
tent-encryption key which is executed in the cryptosys- 
tem step, without being stored in storage unit which is 
readable from the outside of the Information recording 
device. 

20 [0040J The cryptosystem step may Include a step 
which generates the content-encryption key based on 
• the read secret information and encryption-key-gener- 
ating data which is stored in the information recording 
device, and the encryption-key-generating data may be 

25 updated by an enabling key block generated such that 
in a hierarchical tree structure having a plurality of dif- 
ferent information recording devices as leaves, branch- 
es as nodes, and unique keys set for the leaves and the 
nodes, a node key is encrypted by using a key including 

30 at least one of a node key and a leaf key which are po- 
sitioned at a lower level. 

[0041] The encryption-key-generating data may be 
one of a master key common to a plurality of information 
recording devices and a media key unique to a specified 

35 recording medium. 

[0042] The encryption-key-generating data may cor- 
respond to a generation number as updating informa- 
tion, and when storing encrypted data on the recording 
medium, the cryptosystem step may store on the record- 

'fo ing medium the generation number of the encryption- 
key-generating data as a recording-mode generation 
number. 

[0043] The information recording method may further 
include a transport-stream processing step for adding 
an arrival time stamp to each of transport packets con- 
stituting a transport stream. The cryptosystem step may 
include a step which generates a block key as an en- 
crypted key for block data composed of at least one 
transport packet to which the arrival time stamp is add- 
so ed. and In encryption of the data to be stored on the 
recording medium, the cryptosystem step may generate 
a block key as an encryption key based on data Includ- 
ing the secret information, the encryption-key-generat- 
ing data, and a block seed as additional information 
55 which Includes the arrival time stamp and which is 
unique to the block data. 

[0044] The secret-information decoding step may in- 
clude a step which executes decoding processing on 
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ecuted by the CPU 170, and data required for the oper- 
ation of the CPU 170. By driving the recording medium 
195. to/from which digital data can be recorded/played 
back, the drive 190 reads (plays back) and outputs dig- 
ital data from the recording medium 195 to the bus 110. 
and supplies digital data supplied via the bus 11 0 so that 
the digital data is recorded on the recording medium 
195, The device keys may be stored in the memory 180. 
[00711 The recording medium 195 is a medium that 
can store digital data, for example, an optical disk such 
as digital versatile disk (DVD) or compact disk (CD), 
magneto-optical disk (MO), magnetic disk, magnetic 
tapQ. or semiconductor rnemory such as RAM. In this 
embodiment, the recording medium 195 can be loaded/ 
unloaded into/from the drive 190. However, the record- 
ing medium 1 95 may be built into the recording/playback 
device 100. 

[0072] The TS processing unit 300, which is fully de- 
scribed later with reference to Fig. 6 and the following 
drawings, performs data processing that, after extract- 
ing transport packets corresponding to a specified pro- 
gram from a transport stream in which a plurality of TV 
programs (contents) are multiplexed, stores appear- 
ance-timing information of the extracted transport pack- 
ets on the recording medium 195. with each packet, and 
appearance-timing-control processing in the mode of 
reading from the recording medium 195. 
[0073] In the transport stream, an anrival time stamp 
(ATS) is set as appearance-timing information of each 
transport packet. This timing is determined in an encod- 
ing mode so as not to break a transport stream system 
target decoder (T-STD) which is a virtual decoder de- 
fined in MPEG-2. When the transport stream is played 
back, an arrival time stamp that is added to each trans- 
port packet controls the appearance timing. The TS 
processing unit 300 executes control of these steps. For 
example, for recording a transport packet on the record- 
ing medium 195. the transport packet is recorded as a 
source packet in which inten/als of packets are short- 
ened. By recording the transport stream on the record- 
ing medium 195 with the appearance timing of each 
transport stream, the output timing of each transport 
packet can be controlled in playback mode. When re- 
cording data on the recording medium 195 such as 
DVD, the TS processing unit 300 additionally records 
an arrival time stamp representing the input timing of 
each transport packet. 

[0074] The recording/playback device 100 according 
to an embodiment of the invention executes encryption 
of a content composed of a transport stream to which 
the arrival time stamp is added, and the encrypted con- 
tent is stored on the recording medium 195. The cryp- 
tosystem unit 150 executes decoding on the encrypted 
content which is stored on the recording medium 195. 
The details of these processes are described later. 
[0075] The secret-information decoding unit 500 is a 
processing unit that executes the reading and decoding 
of secret information which can be read by performing 



a special reading process stored on the recording me- 
dium 195. The secret information stored on the record- 
ing medium 1 95 includes, for example, a stamper ID set 
for each stamper in disk production, a disk ID differently 
5 set for each disk, a content ID differently set for each 
content, and various identification data and crypto- 
graphic keys, such as keys for use in cryptosystem 
processing. 

[0076] The secret-information decoding unit 500 
10 reads and decodes the secret information stored on the 
recording medium 195. and transfers the decoded se- 
cret information to the cryptosystem unit 150. The cryp- 
tosystem unit 150 uses the secret information to gener- 
ate a cryptographic key which is used when a content 
15 is recorded/read on/from the recording medium 195. 
The secret information, decoded by the secret-informa- 
tion decoding unit 500, is used only when a content-en- 
cryption key is generated in the cryptosystem unit 150, 
without being stored in a storage unit which is readable 
20 from the outside of the recording/playback device 100, 
so that the secret information is prevented from leaking 
to the exterior. 

[0077] The cryptosystem unit 150, the TS processing 
unit 300, and the secret-information decoding unit 500 
25 are shown as separate blocks for ease of understand- 
ing. However, the units 150, 300, and 500 may be 
formed as one or a plurality of LSIs that execute the 
functions of the units. Also, any of the functions may be 
implemented by combining software and hardware. 
30 [0078] The construction shown in Fig. 2 can be used 
as an embodiment of a recording/playback device in ad- 
dition to the construction shown in Fig. 1 . In a recording/ 
playback device 200 shown in Fig. 2. a recording medi- 
um 205 can be removably loaded into a recording me- 
35 dium interface (l/F) 210 as a drive unit, and data reading 
and writing can be performed, even if the recording me- 
dium 205 is loaded into another recording/playback de- 
vice. 

40 Data- Recording Process and Data Reading Process 

[0079] Next, with reference to the flowcharts shown 
in Figs. 3A to 4B. a process of recording data on the 
recording medium 195 and a process of playback of da- 
45 ta from the recording medium 195 in the recording/play- 
back device 100 or 200 in Fig. 1 or 2 are described be- 
low. 

[0080] When a digital-signal content from the exterior 
is recorded on the recording medium 195, a recording 
50 process in accordance with the flowchart shown in Fig. 
3A is performed. 

[0081] Specifically, a digital-signal content (digital 
content) is supplied to the input/output l/F 120 via. for 
example, an IEEE (Institute of Electrical and Electronic 
Engineers) 1394 serial bus or the like, in step 8301. the 
supplied content is received and output to the TS 
processing unit 300 via the bus 110. 
[0082] In step S302. the TS processing unit 300 gen- 
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erates block data in which an arrival time stamp is added 
to each transport packet forming a transport stream, and 
outputs the block data to the cryptosystem unit 150 via 
the bus 110. 

[0083] in step S303, the cryptosystem unit 150 exe- 
cutes encryption processing on the received content, 
and outputs the obtained encrypted content to the drive 
190 or the recording medium l/F 210 via the bus 110. 
The encrypted content is recorded (step S3 04) on the 
recording medium 1 95 via the drive 190 or the recording 
medium l/F 210, and the recording process ends. The 
encryption processing in the cryptosystem unit 150 is 
described later. 

[0084] Five companies including the assignee of the 
present Application, Sony Corporation, has established 
the Five Company Digital Transmission Content Protec- 
tion (hereinafter referred to as the "SCDTCP** or 
"DTCP") system as a standard for protecting digital con- 
tents In a case in which the digital contents are trans- 
mitted between devices connected by an IEEE 1 394 se- 
rial bus. In the DTCP, when a digital content having no 
copy-free information is transmitted between devices, 
authentication which determines whether or not copy- 
control information for copy control is properly treated is 
mutually performed before performing data transmis- 
sion. After that, the digital content is encrypted and 
transmitted at a transmitting end, and the encrypted dig- 
ital content (hereinafter referred to also as the "encrypt- 
ed content") is decrypted at the receiving end. 
[0085] In data transmission/reception based on the 
DTCP standard, in step S301, the inpuVoutput l/F 120 
at the data receiving end receives the encrypted content 
via the IEEE 1394 serial bus. After decrypting the en- 
crypted content in accordance with the DTCP standard, 
the input/output l/F 120 outputs the content as plaintext 
to the cryptosystem unit 150. 

[0086] Digital content encryption based on the DTCP 
Is performed by using a time-changing key after gener- 
ating the key. The encrypted digital content is transmit- 
ted on the IEEE 1394 serial bus, including a key used 
for the encryption, and at the receiving end, the encrypt- 
ed digital content is decrypted by using the key included 
therein. 

[0087] According to the DTCP. accurately, an initial 
value of the key. and a flag representing timing of chang- 
ing a key for use in encryption of the digital content are 
included in the digital content. At the receiving end, by 
changing the initial value of the key included in the en- 
crypted content, based on the timing of the flag included 
In the encrypted content, a key used for encryption is 
generated and the encrypted content is decoded. Here, 
it may be considered that the encrypted content is equiv- 
alent to a case in which a key for decrypting the encrypt- 
ed content Is Included therein. Concerning the DTCP. 
on a Web page specified by a uniform resource locator 
(URL) of. for example, http://www.dtcp.com, an informa- 
tion version can be obtained. 

[0088] Next, with reference to the flowchart in Fig. 3B, 



a case in which an analog signal content from the exte- 
rior is recorded on the recording medium 195 is de- 
scribed below. 

[0089] When the analog signal content (hereinafter 
5 referred to also as the "analog content") is supplied to 
the input/output l/F 140, in step S321, the input/output 
l/F 140 receives the analog content. In step S322, the 
input/output l/F 140 generates a digital signal content 
(digital content) by using the A/D-D/A converter 141 to 
10 perform analog-to-digital conversion on the analog con- 
tent. 

[0090] The digital content is supplied to the MPEG co- 
dec 130. In step S323. the MPEG codec 130 performs 
MPEG encoding or encoding processing using MPEG 
15 compression on the digital content, and supplies the en- 
coded content to the cryptosystem unit 150 via the bus 
110. 

[0091] After that, steps 8324, S325, and S326 are 
performed identically to steps S302, S303, and S304 in 

20 Fig. 3A. in other words, the addition of an arrival time 
stamp to each transport packet by the TS processing 
unit 300 and the encryption processing by the crypto- 
system unit 150 are performed. The resulted encrypted 
content is recorded on the recording medium 195, and 

25 the recording processing Is terminated. 

[0092] With reference to the flowcharts shown in Figs. 
4A and 4B, processing in which a content recorded on 
the recording medium 195 is played back and output as 
a digital content or an analog content is described below. 

30 [0093] A process of outputting the content as a digital 
content to the exterior Is executed as a playback proc- 
ess in accordance with the flowchart in Fig. 4 A. Specif- 
ically, in step S401, the encrypted content recorded on 
the recording medium 195 is read by the drive 190 or 

35 the recording medium l/F 210, and is output to the cryp- 
tosystem unit 150 via the bus 110. 
[0094] In step S402, the cryptosystem unit 150 per- 
forms decryption processing on the encrypted content 
supplied from the drive 190 or the recording medium 1/ 

40 F 210, and outputs the decrypted data to the TS 
processing unit 300 via the bus 110. 
[0095] In step S403, the TS processing unit 300 de- 
termines output timing from the arrival time stamp of 
each transport packet forming the transport stream, per- 

45 forms control in accordance with the arrival time stamp, 
and supplies the transport packet to the input/output 1/ 
F 120 via the bus 110. The input/output l/F 120 outputs 
the digital content from the TS processing unit 300 to 
the exterior and terminates the playback processing. 

50 The processing of the TS processing unit 300 and the 
digital-content decoding processing of the cryptosystem 
unit 1 50 are described later 

[0096] In step S404, when outputting the digital con- 
tent via the IEEE 1394 serial bus. the input/output l/F 
55 120 performs mutual authentication with another de- 
vice, as described above, and succeedingly transmits 
the digital content in an encrypted form. 
[0097] When the content recorded on the recording 
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medium 195 is played back and output as an analog 
content to the exterior, a playback process in accord- 
ance with the flowchart in Fig. 4 is performed. 
[0098] Specifically, steps S421, S422. and S423 are 
performed identically to steps S401, S402, and S403. 
These supply the MPEG codec 1 30 via the bus 11 0 with 
the decoded digital content obtained in the cryptosys- 
tem unit 150. 

[0099] In step S424. the MPEG codec 130 performs 
MPEG decoding or decompression processing on the 
digital content, and supplies the decompressed content 
to the input/output l/F 140. In step S425, the input/output 
l/F 140 generates an analog content by using the built- 
in A/D-D/A converter 141 to perform digital-to-analog 
conversion on the MPEG-decoded digital content. In 
step S426. the Input/output l/F 140 outputs the analog 
content to the exterior and terminates the playback proc- 
ess. 

Data Format 

[0100] Next, with reference to Fig. 5, a data fonnat on 
the recording medium 195 in an embodiment of the in- 
vention is described below 

[0101] In the present invention, a minimum unit for 
reading/writing data from/on the recording medium 195 
is called a "block". One block has a size of 192 by X 
bytes (e.g.. X = 32). 

[0102] In this embodiment of the Invention , a 4-byte 
arrival time stamp Is added to a 188-byte transport 
stream packet in accordance with MPEG-2 so that the 
total size is 192 bytes, and X ATS-added transport 
stream packets constitute one block of data. An arrival 
time stamp is data of 24 to 32 bits which represents an 
arrival time. An arrival time stamp is formed as random 
data in accordance with the arrival time of each packet. 
In one block (sector) of the recording medium 195. X 
ATS-added transport stream packets are recorded. In 
this illustrative embodiment of the invention, by using an 
arrival time stamp added to the first transport stream 
packet of each block forming a transport stream, a block 
key for encrypting the data of the block (sector) is gen- 
erated. 

[01 03] By using the random arrival time stamp to gen- 
erate the encryption block key. different unique keys for 
blocks are generated. The generated block unique keys 
are used to perform encryption processing on blocks. 
Also, by employing the ATS-used generation of the 
block keys, the need for the area of the recording medi- 
um 195 required for the encryption keys is eliminated, 
and a main data area can be effectively used. This elim- 
inates the need for accessing data other than the main 
data in data recording and reading modes, so that effi- 
cient processing can be performed. 
[0104] The block seed shown In Fig. 5 Is additional 
Information Including the arrival time stamp. The block 
Seed may include not only the arrival time stamp but 
also copy control information (hereinafter referred to al- 



so as "CCI"). In this case, by using the arrival time stamp 
and the copy control information, each block key can be 
generated. 

[0105] The copy control information included in the 
5 block seed, which is described later, is copy control in- 
fomnation proposed as a joint proposal of five enterpris- 
es by the DTCP system. The copy control Information 
reflects one of two types of information In accordance 
with device performance, namely, encryption mode in- 
to dicator (EMI), and embedded CCI which is copy control 
information embedded in a content and which is applied 
to a format having a predetermined portion for sending 
copy control Information. 

[01 06] In this embodiment of the Invention, when data 
15 is stored on a recording medium such as a DVD, most 
of content data is encrypted, but first m bytes (e.g.. m = 
8 or 16) of the block are not encrypted and recorded as 
unencrypted data, and the remaining data (byte m+1 or 
greater) is encrypted, as is indicated by the bottom im- 
20 age in Fig. 5. This is because encrypted data length is 
restricted by performing the encryption processing in 
units of eight bytes. If the encryption processing can be 
performed not In units of eight bytes but in units of one 
byte, all portions excluding the block seed may be en- 
25 crypted using m = 4. 

Processing by TS Processing Unit 300 

[0107] The function of the arrival time stamp is de- 

30 scribed below. 

[0108] As described above, the arrival time stamp is 
added in order to store the appearance timing of each 
transport packet in an input transport stream. 
[0109] Specifically, when one or more TV programs 

35 (contents) are extracted from a transport stream in 
which a plurality of TV programs (contents) are multi- 
plexed, transport stream packets constituting the trans- 
port stream appear irregulariy (see Fig. 7A). In the trans- 
port stream, the appearance timing of each transport 

40 packet has Important meaning. The appearance timing 
Is determined in encoding mode so as not to break a 
transport stream system target decoder (T-STD) which 
is a virtual decoder defined in MPEG-2 (ISO/IEC 
13818-1). 

45 [01 10] When the transport stream is played back, the 
appearance timing Is controlled by the arrival time stamp 
added to each transport packet. Accordingly, when re- 
cording transport packets on the recording medium 195, 
the Input timing of each transport packet should be 

50 stored. Thus, when recording the transport packet on 
the recording medium 195. an arrival time stamp that 
represents the input timing of each transport packet is 
additionally recorded. 

[0111] Fig. 6 is a block diagram Illustrating processing 
55 executed by the TS processing unit 300 when a trans- 
port stream input via a digital interface Is recorded on a 
storage medium as the recording medium 195. From a 
terminal 600. a transport stream is input as digital data 
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of digital broadcasting, in Fig. 1 or 2. the transport 
streann is input from the terminal 600 either via the input/ 
output i/F 120 or via the input/output l/F 140 and the 
MPEG codec 130. 

[0112] The transport stream is input to a bit stream 
parser 602. The bit stream parser 602 detects a program 
clock reference (PGR) packet from the input transport 
stream. The PGR packet is such that PGR defined in 
MPEG-2 is encoded. The PGR packet is obtained by 
performing encoding at time intervals of 100 millisec- 
onds or less. The PGR represents a time at which a 
transport packet arrives at the receiving side, with pre- 
cision of 27 MHz. 

[0113] In a 27-MH2 phase-locked loop (PLL) 603, the 
27-MHz clock signal of the recording/playback device is 
locked in the program clock reference of the transport 
stream. A time stamp generating circuit 604 generates 
a time stamp based on a count of clocks of the 27-MH2 
clock signal. A block seed adding circuit 605 uses a time 
stamp obtained when the first byte of a transport stream 
is input to a smoothing buffer 606, as an arrival time 
stamp, and adds the arrival time stamp to the transport 
stream. 

[0114] The ATS-added transport packet passes 
through the smoothing buffer 606 and is output from a 
terminal 607 to the cryptosystem unit 1 50. After the ATS- 
added transport packet is encoded by the cryptosystem 
unit 150, the encoded transport packet is recorded on 
the recording medium 195 as a storage medium via the 
drive 190 (Fig. 1) or the recording medium l/F 210 (Fig. 
2). 

[01 1 5] Figs. 7A to 7C show an example of a process 
performed when the input transport stream is recorded 
on the recording medium 195. Fig. 7A shows input trans- 
port packets constituting a specified program (content), 
where the vertical axis is a time base indicating time on 
the transport stream. As shown in Fig. 7 A, the input 
transport packets appear with irregular timing. 
[0116] Fig. 7B shows an output from the block seed 
adding circuit 605. The block seed adding circuit 605 
outputs source packets by adding, to each transport 
packet, a block seed including an arrival time stamp rep- 
resenting a time on the stream of the packets. Fig. 7C 
shows source packets recorded on the recording medi- 
um 195. By recording the source packets at shortened 
intervals as shown in Fig. 7G, the recording area of the 
recording medium 195 can be effectively used. 
[0117] Fig. 8 shows a processing configuration of the 
TS processing unit 300 in a case in which the transport 
stream recorded on the recording medium 195 is played 
back. An ATS-added transport packet, decoded by an 
cryptosystehi unit (described later), is input from a ter- 
minal 800 to a block seed separation circuit 801, and is 
separated into an arrival time stamp and a transport 
packet. A timing generating circuit 804 calculates a time 
based on a clock counter value of a 27-MHz clock unit 
805 of the TS processing unit 300 when it performs play- 
back. 



[0118] At the start of playback, the first arrival time 
stamp is set as an initial value in a timing generating 
circuit 804. A comparator 803 compares the arrival time 
stamp with the present time input from the timing gen- 
5 erating circuit 804. When the time generated by the tim- 
ing generating circuit 804 is equal to the arrival time 
stamp, an output control circuit 802 outputs the transport 
packet to the MPEG codec 130 or the input/output l/F 
120. 

10 [0119] Fig. 9 is a block diagram showing a case in 
which an input AV signal is MPEG-encoded by the 
MPEG codec 1 30 of the recording/reproducing unit 1 00. 
and a transport stream is encoded by the TS processing 
unit 300. Accordingly, Fig. 9 is a block diagram showing 

15 a combination of the MPEG codec 130 and the TS 
processing unit 300 In Fig. 1 or 2. 
[0120] A video signal is input from a terminal 901 to 
an MPEG video encoder 902. 

[01 21 J The MPEG video encoder 902 encodes the in- 

20 put video signal to generate an MPEG video stream, and 
outputs the MPEG video stream to a video stream buffer 
903. The MPEG video encoder 902 outputs access-unit 
information on the MPEG video stream to a multiplex 
scheduler 908. An access unit is a picture, and the ac- 

25 cess-unit information is the picture type of each picture, 
an amount of encoded bits, and a decode-time stamp. 
The picture type is l/P/B picture information. The de- 
code-time stamp is information defined in MPEG-2. 
[0122] An audio signal is input from a terminal 904 to 

30 an MPEG audio encoder 905. The MPEG audio encoder 
905 encodes the input audio signal to generate an 
MPEG audio stream, and outputs the stream to an audio 
stream buffer 906. The MPEG audio encoder 905 also 
outputs access-unit information on the MPEG audio 

35 stream to the multiplex scheduler 908. An access unit 
of an audio stream is an audio frame, and the access- 
unit information is an amount of encoded bits in each 
audio frame and a decode-time stamp. 
[0123] Access-unit information on video and audio is 

40 input to the multiplex scheduler 908. Based on the input 
access-unit information, the multiplex scheduler 908 
controls a method of encoding a video stream and an 
audio stream to generate transport packets. The multi- 
plex scheduler 908 includes a 27-MHz-precision clock 

45 generator for generating a reference time, and deter- 
mines packet-encoding control information for a trans- 
port packet so as to satisfy a transport stream system 
target decoder as a virtual decoder model. The packet- 
encoding control information is a type of a stream to be 

50 formed in packet and the length of a stream. 

[01 24] When the packet-encoding control information 
represents a video packet, a switch 976 connects to the 
side a, so that video data is read which has a payload 
data length designated by the packet-encoding control 

55 information from the video stream buffer 903, and is in- 
put to a transport packet encoder 909. 
[0125] When the packet-encoding control information 
represents an audio packet, the switch 976 connects to 
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the side b. so that audio data is read which has a payload 
6ata length designated by the audio stream buffer 906. 
and is input to the transport packet encoder 909. 
[01 26] When the packet-encoding control information 
represents a program clock reference packet, the trans- 
port packet encoder 909 captures a program clock ref- 
erence input from the multiplex scheduler 908. and out- 
puts a program clock reference packet. When the pack- 
et-encoding control information indicates that packet 
encoding is not performed, nothing is input to the trans- 
port packet encoder 909. 

[01 27] When the packet-encoding control information 
indicates that packet encoding is not performed, the 
transport packet encoder 909 does not output any trans- 
port packet. In cases other than that, based on the pic- 
ture, the transport packet encoder 909 generates and 
outputs transport packets. Accordingly, the transport 
packet encoder 909 intermittently outputs transport 
packets. Based on the program clock reference input 
from the multiplex scheduler 908, an arrival time stamp 
calculator 910 calculates, an arrival time stamp repre- 
senting a time at which the first byte of the transport 
packet arrives at the receiving side. 
[0128] The program dock reference input from the 
multiplex scheduler 908 represents an arrival time at 
which the tenth byte of a transport packet defined in 
MPEG-2 arrives at the receiving side. Thus, the value 
of the arrival time stamp is an arrival time of a byte that 
Is positioned ten bytes before the time of the program 
clock reference. 

[0129] A block-seed adding circuit 911 adds an arrival 
time stamp (ATS) to the transport packet output from the 
transport packet encoder 909. The ATS-added transport 
packet which is output from the block-seed adding cir- 
cuit 911 passes through a smoothing buffer 912 to be 
input to the cry ptosy stem unit 1 50. After the input ATS- 
added transport packet is encrypted as described later, 
the encrypted ATS-added transport packet is recorded 
on the recording medium 195 as a storage medium. 
[0130] Before being encrypted by the cryptosystem 
unit 150, the ATS-added transport packets to be record- 
ed on the recording medium 195 are input, with the in- 
tervals of the packets shortened. After that, the encrypt- 
ed ATS-added transport packets are recorded on the re- 
cording medium 195. Even if transport packets are re- 
corded with the intervals thereof shortened, a time at 
which the transport packets are input can be controlled. 
[0131] The length of an arrival time stamp is not lim- 
ited to 32 bits, but may be 24 to 31 bits. The longer the 
bit length of the arrival time stamp, the greater each cy- 
cle of a time counter for arrival time stamp. For example, 
when the time counter for arrival time stamp is a binary 
counter with precision of 27 MHz. the time required for 
a cycle of a 24-bit-length arrival time stamp is approxi- 
mately 0.06 seconds. This time is sufficient for an ordi- 
nary transport stream. This is because under provision 
of MPEG-2. each packet interval of transport streams is 
a maximum of 0.1 seconds. However, the arrival time 



stamp may have 24 or more bits for sufficient tolerance. 
[0132] In the above cases in which the bit length of 
the arrival time stamp is variously set. there are a plu- 
rality of possible configurations for a block seed as an 
5 additional data to block data. 

[01 33] Fig. 1 0 shows block seed configurations. In ex- 
ample 1 in Fig. 10. thirty-two bits are used for the arrival 
time stamp. In example 2 in Fig. 10, thirty bits are used 
for the arrival time stamp, and two bits are used for copy 
10 control information. Copy control infomnatlon represents 
a state of copy control in data to which the copy control 
information is added. Concerning copy control Informa- 
tion, the Serial Copy Management System (SCMS) and 
the Copy Generation Management System (CGMS) are 
15 famous. By using copy control information based on 
these systems, types of information can be shown, such 
as "Copy Free" infomnatlon indicating that data to which 
Copy Free Information is added may be limitlessly cop- 
ied, "One Generation Copy Allowed" information indi- 
20 cati ng that the copying of data to which One Generation 
Copy Allowed infomiation is added can be performed 
only in one generation, and "Copy Prohibited" informa- 
tion indicating that the copying of data to which Copy 
Prohibited information is added is prohibited, 
25 [0134] In example 3 in Fig. 10, twenty-four bits are 
used for the arrival time stamp, two bits are used for the 
copy control information, and six bits are used for other 
information. Various types of information, such as infor- 
mation representing the switching on/off of a Macrovi- 
30 slon as an analog- picture-copy-control mechanism in a 
case in which other-infomnation-included data is analog- 
output, can be used as other information. 
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[0135] Next, a configuration is described below in 
which the recording/playback device 100 or 200 in Fig. 
1 or 2 distributes, to each device, the master key re- 
quired for recording data on a recording medium or for 
40 playing back data from the recording medium 195. 

[0136] Fig. 11 illustrates the distribution of a key for 
each recording/playback device in a recording system 
using the configuration. In Fig. 11. the numbers 0 to 15 
shown at the bottom indicate recording/playback devic- 
es es. respectively. The leaves of the tree structure shown 
in Fig. 11 correspond to the devices. 
[0137] Each of the devices 0 to 15 stores node keys 
assigned to nodes from its leaf as a node to the root, 
and a leaf key corresponding to its leaf. The alphanu- 
50 meric representations KOOOO to Kl 1 1 1 shown in the bot- 
tom of Fig. 11 are leaf keys assigned to the devices 0 to 
15. In Fig. 11. the top node KR to the nodes KOOO to 
Kill in the second row from the t>ottom are node keys. 
[0138] In the tree structure shown in Fig. 11. for ex- 
55 ample, device 0 possesses leaf key KOOOO, and node 
keys KOOO, KOO. KO. and KR. Device 5 possesses leaf 
key K0101 . and node keys K010. KOI. KO, and KR. De- 
vice 1 5 possesses leaf key K 1 1 1 1 . and node keys Kill. 



14 



27 



EP1 187 391 A2 



28 



K11. K1. and KR. Although the tree structure shown in 
Fig. 11 includes only the sixteen devices 0 to 15 and has 
four levels and balanced symmetry, it may Include more 
devices and a different number of levels in each portions 
of the tree. 

[01 39] The devices 0 to 1 5 as recording/playbacl< de- 
vices include various types of recording/playback devic- 
es that use various types of recording media such as 
DVDs. CDs, MDs. and Memory Sticks (trademark). Al- 
so, it is possible that various application services coex- 
ist. The key distribution in Fig. 11 is applied to a config- 
uration in different devices and different applications co- 
exist 

[01 40] 1 n this system in which va rious devices and ap- 
plications coexist, for example, the portion surrounded 
by the dotted line in Fig. 11 . specifically, devices 0,1,2. 
and 3 are treated as a group using a single recording 
medium. To devices 0, 1, 2, and 3 included in this group, 
a process of simultaneously sending by a provider a 
common content in an encrypted form, a process of 
sending a master key for use in common, and a process 
of outputting content-charge-payment data in an en- 
crypted form from each device to a provider are per- 
formed. An authority that transmits/receives data to/ 
from each device, such as a content provider or a set- 
tlement authority, treats the portion surrounded by the 
dotted line in Fig. 11 as one group and performs simul- 
taneous data-transmission processing. Similar groups 
exist in the tree in Fig. 11 . 

[0141] Node keys and leaf keys may be controlled by 
a single key, or may be controlled for each group by an 
authority that transmits/receives data to/from each 
group, such as a provider or a settlement authority. 
These node keys and leaf keys are updated, for exam- 
ple, when a leak of a key occurs, and the process of 
updating is executed by a key-control center, a provider, 
a settlement authority, etc. 

[0142] As is clear from Fig. 11, in the tree structure, 
the three devices 0, 1 , 2. and 3 included in one group 
possess common keys KOO. KO, and KR as node keys. 
By using this node-key sharing system, for example, a 
common master key can be provided to a limited 
number of devices 0, 1.2, and 3. For example, by using 
node key KOO itself, which is possessed in common, as 
a master key. only devices 0, 1,2, and 3 can use the 
master key in common without receiving a new key. In 
addition, by distributing, to devices 0, 1,2, and 3, code 
Enc(KOO, K^ster) obtained by encrypting new master 
key K^aster "Sing node key KOO via a network or by using 
a recording medium containing the value, only devices 
0. 1, 2, and 3 decrypt code Enc(KOO. K^aster) with 
shared master key KOO, which is possessed by them, 
and can obtain \<^rnas\er ^^^^ obtained by using Kg to 
encrypt K^ is represented by Enc(Ka. K^). 
[0143] When it is discovered at time "t" that the keys 
of device 3, K0011. K001, KOO, KO. and KR have been 
analyzed and exposed by a hacker, device 3 must be 
cut off from the system in order to protect data transmit- 



ted and received in the system (the group of devices 0, 
1,2, and 3) after time "t". Accordingly, node keys K001 , 
KOO, KO. and KR should be updated to generate new 
keys K(t)001, K(t)00. K(t)0, K(t)R, respectively, and the 
5 new keys should be posted to devices 0. 1, 2, and 3. 
Here. K(t)aaa represents an updated key in generation 
"t" of key Kaaa. 

[0144] A process for distributing the updated keys is 
described below. 
10 [0145] Key updating is performed by distributing, to 
devices 0, 1 , and 2, a table formed by block data called 
an "enabling key block (EKB)" (shown in Fig. 12A), for 
example, via a network or by using recording media con- 
taining the table. 
15 [0146] In the enabling key block shown in Fig. 12A. 
only devices in which node keys should be updated are 
shown as block data having an updatable data arrange- 
ment. The example shown in Fig. 12A is block data 
formed for the purpose of distributing updated node 
20 keys in generation "t" in connection with devices 0, 1, 
and 2 In the tree structure in Fig. 11. As is clear from 
Fig. 11, devices 0 and 1 need K(t)00, K(t)0. and K(t)R 
as updated keys, device 2 needs K(t)001. K(t)00, K(t)0, 
and K(t)R as updated keys. 
25 [0147] As the enabling key block in Fig. 12A shows, 
the enabling key block includes a plurality of encryption 
keys. The bottom encrypted key is Enc(K001 0. K(t)001)- 
This is updated node key K(t)001 obtained by perform- 
ing encryption using leaf key K0010 of device 2. Device 
30 2 can obtain K(t)001 by using its own leaf key to decrypt 
encrypted key Enc(K0010, K(t)OOI). By using K(t)001 
obtained by decryption, the second encrypted key Enc 
(K(t)OOI , K(t)OO) from the bottom in Fig. 12A can be de- 
crypted. This makes it possible to obtain updated node 
35 key K(t)00. 

[0148] Similariy, by decrypting the second encrypted 
key Enc(K(t)00, K(t)O) from the top in Fig. 12 A, updated 
node key K(t)0 can be obtained. By decrypting the first 
encrypted key Enc(K(t)0, K(t)R) from the top in Fig. 12A, 
40 K(t)R can be obtained. 

[0149] In the case of devices 0 and 1 , node key KOOO 
is not included in what to update. Necessary node keys 
are K(t)00. K(t)0, and K(t)R. In devices 0 and 1. by de- 
crypting the third encrypted key Enc(K000, K(t)OO), K(t) 
45 00 can be obtained. 

[0150] Subsequently, by decrypting the second en- 
crypted key Enc(K(t)00. K(t)O) from the top in Fig. 12 A, 
updated node key K(t)0 can be obtained. By decrypting 
the top encrypted key Enc(K(t)0, K(t)R). K(t)R can be 
50 obtained. 

[0151] By using the above operation, devices 0. 1. 
and 2 can obtain updated key K(t)R. The "INDEX" in Fig. 
12A indicates the absolute address of a node key or a 
leaf key used as a decryption key. 
55 [0152] In a case in which upper node keys KO and KO 
in the tree structure in Fig. 11 do not need to be updated, 
and only node key KOO should be updated, updated 
node key K(t)00 can be distributed to devices 0. 1 , and 
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2 by using the enabling key block in Fig. 12B. 
101 531 The enabling key block in Fig. 1 2B can be used 
in the case of distributing a new master key that is 
shared in a specified group. It is assumed as a specific 
example that devices 0. 1,2, and 3 in the dotted-line 
group in Fig. 11 use certain recording media and need 
new common master key K(t)^sier- Then, data Enc(K 
(t), K(t)master) is distributed which is obtained by encrypt- 
ing updated master key K(t)n,aster with K{t)00 obtained 
by updating node key KOO common to devices 0.1.2. 
and 3. Thus, data Enc{K(t), K(t)^aster) »s distributed, as 
data that is not decrypted, to the devices of other groups, 
such as device 4. 

[0154] In other words, devices 0, 1 . and 2 can obtain 
master key K(t)rnaster a* by decrypting the above 

data using K(t)00 obtained by processing the enabling 
key block. 

Distribution of Master Key Using Enabling Key Block 

[0155] Fig. 13 shows, as a processing example of ob- 
taining master key K(t)^aster at time "t", processing of 
device 0 that receives, via a recording medium, data Enc 
(K(t)OO. K{t)n^ster) Obtained by using K(t)00 to encrypt 
new common master key K(t)master. the enabling 
key block shown in Fig. 12B. As shown in Fig. 13. device 
0 generates node key K(t)00 by performing enabling- 
key-biock processing similar to the above, using the en- 
abling key block at time as a generation recorded on the 
recording medium. After decrypting updated master key 
*^{t)master ^slng decrypted updated node key K(t)00, de- 
vice 0 encrypts the master key using its own leaf key 
KOOOO and records the encrypted master key so that the 
master key can be used afterward. When device 0 can 
securely store updated master key K(t)^3,gp the en- 
cryption using leaf key KOOOO is not required. 
[0156] With reference to the flowchart shown in Fig. 
14, a process for acquiring the updated master key is 
described below. It is assumed that the latest master key 
K{c)^aster given to each recording/playback device 
when it is shipped and is stored in an internal memory 
securely (specifically, for example, in a form in which the 
given master key is encrypted using the device's leaf 
key). 

[01 57J When the recording medium that contains up- 
dated master key K(n)^aster the enabling key block 
Is loaded into the recording/playback device, in step 

51 401. the recording/playback device reads the time 
(generation) number "n" (represented by pre-recording 
generation information #n'') of the recorded master key 
K(n)n^s,er ^^om the recording medium. On the recording 
medium, the time (generation) number "n" of the record- 
ed master key K(n)^aster 's recorded beforehand. In step 

51 402. after reading self-retained encryption master 
key C. the recording/playback device compares 
the "generation c" of the encryption master key and 
the "generation n" of the pre-recording generation infor- 
mation, and determines the order of the generations. 



[01 58] In step S1 402. if the recording/playback device 
has determined that "generation n" represented by pre- 
recording generation information #n does not follow (is 
not newer than) the "generation c" of encrypted master 

5 key C stored in the internal memory, in other words, 
when the "generation c" of encrypted master key C is 
identical to or follows "generation n" represented by pre- 
recording generation information #n, steps SI 403 to 
SI 408 are skipped and the master key updating process 

10 is terminated. In this case, the master key K(c)rT^aster 
stored in the internal memory is not updated since it 
does not need to be updated. 

[01 59] In step S1 402, if the recording/playback device 
has determined that "generation n" represented by pre- 

15 recording generation information #n follows (is newer 
than) the "generation c" of encrypted master key C 
stored in the intemal memory, in other words, when the 
"generation c" of encrypted master key C is older than 
"generation n" represented by pre-recording generation 

20 information #n, the recording/playback device proceeds 
to step SI 403 and reads the enabling key block from 
the recording medium. 

[0160] In step S1404, the recording/playback device 
calculates key K(t)00 of node KOO at pre-recording gen- 

25 eration information #n by using the enabling key block 
read in step SI 403. and the leaf key (KOOOO in device 
0 in Fig. 11) and the node keys (KOOO. KOO. etc., in de- 
vice 0 in Fig. 11 ) which are stored in the intemal memory. 
[0161] In step S1405. the recording/playback device 

30 determines whether it has obtained K(t)00 in step 
S1404. If the recording/playback device has not ob- 
tained K(t)00. it is indicated that the recording/playback 
device is revoked from the group in the tree structure 
that time. Accordingly, steps S1406 to S1408 are 

35 skipped and the master key updating process is termi- 
nated. 

[0162] If the recording/playback device has obtained 
K(t)00, it proceeds to step S 14606 and reads, from the 
recording medium. Enc(K(t)00. K(t)r„aster). which is a 
40 code obtained by using K(t)00 to encrypt the master key 
at time "t". In step SI 407. the recording/playback device 
uses K(t)00 to decrypt the code and calculates K 

(t) master- 

[0163] In Step S1408. in the recording/playback de- 
45 vice. K(t)master "s encrypted using its leaf key (KOOOO in 
device 0 in Fig. 11) and is stored in the internal memory. 
After that, the master key updating process ends. 
[0164] Although master keys are used in ascending 
order from the key at time (generation) zero (0), it is pref- 
50 erable that the master keys from the new generation to 
the older generation be structured by computation, as 
required by the component units of the system. In other 
words, the recording/playback device retains unidirec- 
tional "function T. and creates a desired master key by 
55 applying its own master key to the unidirectional "func- 
tion r a number of times which corresponds to the dif- 
ference between the generation of the master key and 
the generation of the required master key. 
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[01 65] Specifically, by way of example, when the gen- 
eration of the master key MK stored in the recording/ 
playback device is i+ 1 . and the generation of the master 
key MK required for reading data is i-1 . master key K(i- 
'')master is generated such that in the recording/playback 
device, unidirectional "function f ' is used twice to calcu- 
late f(f(K{i+1)^aster)) 

[0166] When the generation of the master key MK 
stored in the recording/playback device is i+1. and the 
generation of the master key MK required for reading 
data is i-2. master key K(i-2) master 's generated such that 
in the recording/playback device, unidirectional 
"function T is used three times to calculate f(f(f(K 

(»+1)master)))- . ^ ^ ^ 

[0167] In this operation, for example, the hash 
function can be used as the unidirectional "function T. 
Specifically MD5 (Message Digest 5). SHA-1 (Secure 
Hash Algorithm - 1 ). etc. . can be employed. A key issuing 
authority uses these unidirectional functions to 
beforehand calculate master keys by which generations 
older than their generations can be formed, namely, K 

(O)masteP K(1)^3sten ^(^)rmsXer K(N)^33ter 

Specifically initially, by setting N-generatIng master key 
K(N)master. applying the unidirectional function to 
master key K(N)fTiaster ^^^h time, older generation 
master keys, K(N-1)master.^<(N-2)master *^(l)mastep ^ 
(O)master sequentially generated. After that, the 
generated master keys are used in sequence from 
smaller generation master key K(0)rT,aster- is assumed 
that unidirectional function that is used to generate 
master keys having generations older than the 
generation of a master key be set in all recording/ 
playback devices. 

[0168] Also, for example, public key cryptosystem 
technology can be used as a unidirectional function. In 
this case, a key issuing authority possesses a secret key 
for a public key cryptosystem and provides a public key 
corresponding to the secret key to all reproducing de- 
vices. The key issuing authority sets zero-th generation 
master key K(0)master. begins to use K(0)^ster. 
Specifically when requiring master key K(i)master sub- 
sequent to the first generation, the key issuing authority 
generates and uses master key K(i)^aster by using the 
secret key to convert master key K(i-1)master which is 
older one generation. In this case, the key issuing au> 
thority does not need to generate an N-th generation 
master key beforehand by using the unidirectional func- 
tion. According to this method, theoretically, master 
keys of a limitless number of generations can be gener- 
ated. If each recording/playback device retains a master 
key of a generation, it can obtain a master key of a gen- 
eration older than the generation by using a public key 
to convert the master key 

[0169] Next, with reference to the flowchart shown in 
Fig. 15, a process by the recording/playback device is 
described below which is performed when the record- 
ing/playback device records a content on its own record- 
ing medium. 



[01701 Content data is encrypted using a master key 
of a generation and is distributed from a content provider 
to each recording/playback device via a network or us- 
ing recording media. 
5 [0171] In step S1501. the recording/playback device 
reads pre- recording generation information #n from the 
recording medium. The recording/playback device also 
acquires the "generation c" of encrypted master key C 
stored in its own memory. 
10 [0172] In step SI 502, the recording/playback device 
compares the "generation c" of the encrypted master 
key C and "generation n" represented by pre-recording 
generation infomiation #n, and determines the order of 
the generations. 
15 [0173] In steps 1502. if the recording/playback device 
has determined that the "generation c" of encrypted 
master key C stored in its own memory does not follow 
"generation n" represented by pre-recording generation 
infomnation #n, in other words, when the "generation c" 
20 of encrypted master key C stored in its own memory is 
older than "generation n" represented by pre-recording 
generation infomiation #n, the recording/playback de- 
vice skips over step S1 503 and does not perform a con- 
tent data recording process 
25 [0174] In step SI 502, if the recording/playback device 
has determined that the "generation c" of encrypted 
master key C stored in its own memory follows "gener- 
ation n" represented by pre-recording generation infor- 
mation #n, in other words, when the "generation c" of 
30 encrypted master key C stored in its own memory is 
identical to or newer than "generation n" represented by 
pre-recording generation information #n, the recording/ 
playback device goes to step S1503 and performs the 
content data recording. 

35 

Content Data Encryption and Recording Processing 
Using Generation-Controlled Master Keys 



[0175] A process in which a recording/playback de- 
40 vice performs encryption of content data using genera- 
tion-controlled master keys and records the encrypted 
data on its own recording medium is described below. 
Here, a process is described in which a block key is gen- 
erated based on data using the generation-controlled 
45 master key. and data composed of the above transport 
stream is encrypted using the block key and is stored 
on a recording medium. 

[0176] With reference to the block diagrams shown in 
Figs. 16 and 17. and the flowchart shown in Fig. 18, the 

50 above process is described below. 

[0177] An optical disk is used as an example of a re- 
cording medium. In the embodiment shown in Figs. 16 
to 18, in order to prevent the copying of data on the re- 
cording medium bit by bit, disk ID that is identification 

55 information unique to the recording medium is controlled 
to operate on a key for encryption of data. 
[0178] In accordance with Figs. 16 and 17. an outline 
of data-encryption processing performed by the crypto- 
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system unit 150 is described below. 
10179] A recording/playback device 1600 reads a 
master key 1601, an analyzing data-recording key 
(hereinafter referred to as a "cognizant key") 1631 or a 
non-analyzing data-recording key (hereinafter referred 
to as a "noncognizant key") 1632, which are stored in 
an intemal memory like the memory 180 (Fig. 1 or 2). 
The cognizant key 1631 and the non-cognizant key 
1632 are described later. 

[0180] The master key 1601 is a secret key stored in 

the memory of the recording/playback device 1600 as 
shown in the flow of Fig. 14. The generation of the mas- 
ter key 1601 is controlled as described above, and a 
generation number is correlated with each generation. 
The master key 1601 is a key used in common in a plu- 
rality of recording/playback devices, for example, a key 
common to devices 0 to 3 belonging to the dotted-line 
group shown in Fig. 11. A device ID is the identifier of 
the recording/playback device 1600 and is an identifier 
stored beforehand therein, such as a serial number in 
production. The device ID may be open to the public. 
The cognizant key 1631 and the non-cognizant key 
1632 correspond to recording modes, respectively, and 
are common to a plurality of recording/playback devic- 
es. These keys are stored beforehand in the memory of 
the recording/playback device 1 600. 
[0181] The recording/playback device 1600 checks 
the recording medium 1620 as an optical disk about 
whether the disk ID 1603 as identification information 
has already been recorded. If the disk ID 1603 has been 
recorded, the recording/playback device 1600 reads the 
disk ID 1603 (Fig. 16). If the disk ID 1603 has not been 
recorded, a disk ID 1701 is generated randomly or by a 
predetermined method such as random number gener- 
ation by an cryptosystem unit 150, and is recorded on 
the recording medium (Fig. 17). The disk ID 1603 can 
be stored in a lead-in area or the like since the disk 
needs to have one disk ID. 

[0182] The recording/playback device 1600 gener- 
ates a disk unique key 1602 by using the master key 
1601. a stamper ID 1680 that is recorded as secret in- 
formation readable from the disk only in a special read- 
ing method, and the disk ID 1603. 
[0183] The following two methods shown in Fig. 19 
can be used as specific methods for generating the disk 
unique key 1602 by using the master key 1601. the 
stamper ID 1680 as secret information, and the disk ID 
1603. In one method (example 1), the master key 1601, 
the stamper ID 1680. and the disk ID 1603 are input to 
a hash function using a block encryption function, and 
the obtained result is used. In another method (example 
2), data which is obtained by the bit concatenation of the 
master key 1601. the stamper ID 1680 as secret infor- 
mation, and the disk ID 1603 Is input to hash function 
SHA-1 defined in Federal Information Standard Publi- 
cation (FIPS PUB) 180-1 . and from the resultant 160-bit 
output, a necessary data length is used as the disk 
unique key 1602. 



[0184] As described above, the stamper ID 1680 is 
highly secret information recorded on the disk. Arithme- 
tic processes, such as the reading of the stamper ID 
1680, and the generation of the disk unique key 1602 

5 by using the stamper ID 1680. are executed inside the 
cryptosystem unit 150 so that secrecy is maintained. In 
other words, the secret information read from the disk 
is securely protected in the cryptosystem unit 1 50. 
[0185] In emt)odiments of the invention, secret infor- 

10 mation that can be read by only a special reading meth- 
od is read by only an appropriate device, that Is, a device 
capable of reading the secret information. Under secure 
protection, the secret information Is used for the process 
of generating keys for encrypting contents In, for exam- 

15 pie, a cryptosystem unit which is mounted in an LSI and 
which performs the generation of a highly protected 
cryptographic key, so that the secret information is not 
stored in an externally readable memory. Accordingly, 
there is no possibility that the secret information teaks, 

20 and playback of abnormal contents can be effectively 
prevented. 

[0186] As described above, secret information such 
as a stamper ID is written in a disk in a manner different 
from an ordinary data writing technique, and can be read 
25 in a technique different from ordinary data reading. The 
processes of writing and reading the secret information 
are described later. 

[0187] In the recording/playback device 1600, the 
cryptosystem unit 150 (see Fig. 1 or 2) generates a title 
30 key 1604 as a unique key for each time of recording, 
randomly or by a predetermined method such as ran- 
dom number generation, and records the title key 1604 
on the disk 1620. 

[01 88] After that, a flag 1633 that indicates which of a 
35 cognizant mode or a non-cognizant mode is set as a 
recording mode 1635. and the recording mode 1635 is 
recorded on the disk 1620. 

[0189] Here, the cognizant mode and the non-cogni- 
zant mode are described below. 

40 [0190] In each content, whether or not the content can 
be copied under what conditions is designated before- 
hand by a content provider. Accordingly, In network con- 
nection, the designated conditions should be correctly 
posted from a device to another device. In the DTCP 

45 system, a method using copy control information is used 
to solve this problem. Concerning copy control informa- 
tion, there are two types of transmission techniques in 
accordance with device performance. 
[0191] "Encryption Mode Indicator (EMI)" is a mech- 

50 anism in which the two upper Sy bits in a packet header 
are used to send copy control information. By using this 
mechanism, a receiver device can easily perform ac- 
cessing, and a content can be securely sent because 
the value of the Encryption Mode Indicator acts on a key 

55 for encrypting the content. 

[0192] The Encryption Mode Indicator is used to Indi- 
cate the encryption mode of the packet, and the gener- 
ation modes of content encryption and decryption keys 
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are designated. By disposing the Encryption Mode Indi- 
cator in an IEEE 1 394 packet header, a receiver device 
is allowed to easily know the type of a mode for encryp- 
tion of the content, for example, without extracting an 
embedded copy control infomiation (described later) in 
an MPEG transport stream. 

[01931 Fig. 20 shows an IEEE 1394 packet format. In 
-Data Field", various types of contents, such as music 
data and image data, are stored. The Encryption Mode 
Indicator (EMI) as copy control information is set as two 
upper Sy bits in a packet header 
[01941 The 2-bit EMI information defines a different 
type of treatment in accordance with the set value. Spe- 
cifically, value "00" is "Copy Free" indicating that neither 
authentication nor encryption is not required and that a 
content may be freely copied. Value "01" Is "Copy One 
Generation" indicating that 1 -generation copying may 
be performed. Value "1 0" is "No More Copies" indicating 
that after the above Copy One Generation is recorded 
once, recopying is inhibited. Value "11" is "Never Copy- 
indicating that the copying of a content is inhibited from 
the release thereof. 

[01951 In the non-cognizant recording mode, in order 
that a bit stream recorder, such as D-VHS or hard disk, 
which does not recognize the format of data to be re- 
corded may correctly treat copyrighted material, it is only 
necessary to update the Encryption Mode Indicator, 
without requiring the updating (e.g.. Copy One Genera- 
tion to No More Copies) the embedded copy control in- 
formation when content recording is performed. 
[01961 Conversely, in a format (e.g., DV-fomnat) in 
which an area for sending copy control information is 
reserved, the copy control information can be sent as 
part of a content. Copy control information that is em- 
bedded as part of the content, as described above, is 
called "embedded copy control information". Normally, 
when a content is encrypted and transferred, embedded 
copy control information is similariy encrypted and 
transferred. It is considered that an intentional change 
of the embedded copy control information is difficult. 
[01971 Here, in the case of a content having both the 
above 2-bit EMI copy control information and the em- 
bedded copy control information, a recording device that 
performs content recording updates the two types of 
copy control information, namely, both the Encryption 
Mode Indicator and the embedded copy control infor- 
mation. However, in the case of a recording device that 
does not have ability to analyze the embedded copy 
control information, the Encryption Mode Indicator is up- 
dated but the embedded copy control information is not 
updated. 

[01981 A recording technique in which in a content re- 
cording mode, after updating embedded copy control In- 
formation transmitted as part of a content, a recording 
device records the content with the updated embedded 
copy control information, is called a "cognizant mode". 
In comparison between the cognizant mode and the 
non-cognizant mode, the non-cognizant mode causes 



a small load and can be easier employed because the 
updating of the embedded copy control information 
does not need to be performed. However, the DTCP has 
a rule in which In order that a device may perform MPEG 
5 decoding of a content and may output a video signal 
from an analog terminal, the device should employ the 
cognizant mode. Accordingly, a device having a decod- 
ing/display function should have a function of executing 
the cognizant mode. 
10 [01991 In addition, in order to execute the cognizant 
mode, it is necessary to completely know the position 
and meaning of the embedded copy control information 
which is embedded as part of the content. For example, 
concerning a new or updated data fomiat established 
15 after a certain device goes on the market, an old device 
may have a great difficulty in executing the cognizant 
mode in the new or updated data format. 
[02001 Accordingly, it is possible that, for a specified 
data fomiat or implementing a specified function, a con- 
20 tent recording device execute the cognizant mode, while 
for recording a content having a different data format, 
the content recording device execute the non-cognizant 
mode. 

[02011 There is a type of device that only performs re- 
25 cording using the non-cognizant mode for all contents. 
Conversely, there may be a type of device that only ex- 
ecutes processing for contents having fomnats capable 
of understanding embedded copy control information, 
in other words, a type of device that only executes the 
30 cognizant mode. 

[0202] As described above, in circumstances in which 
two type of copy control information, namely, Encryption 
Mode Indicator and embedded copy control information 
exist, and both a device that executes the cognizant 
35 mode and a device that executes the non-cognizant 
mode exit, it is preferable to distinguish between a con- 
tent recorded in the cognizant mode and a communica- 
tion network recorded in the non-cognizant mode. 
[0203] In other words, when the cognizant mode is 
40 used to perform content recording, both types of copy 
control information, namely. Encryption Mode Indicator 
and embedded copy control information are updated, 
but when the non-cognizant mode is used to perform 
content recording, only Encryption Mode Indicator is up- 
45 dated and embedded copy control infomnation is not up- 
dated. As a result, mismatching occurs between the En- 
cryption Mode Indicator and the embedded copy control 
information recorded on a recording medium, and the 
mismatched Encryption Mode Indicator and embedded 
50 copy control information mix to cause confusion. That is 
why the distinction of the contents is preferable. There- 
fore, in order to prevent the two types of copy control 
information from being mismatched, for the content re- 
corded in the cognizant mode, cognizant-mode record- 
55 ing/playback processing should be executed, and for 
the content recorded in the non-cognizant mode, non- 
cognizant-mode recording/playback processing should 
be executed. 
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[0204] Accordingly, one idea is that the cognizant 
mode and the non-cognizant mode are treated as sep- 
arate recording modes. In this case, in order for a device 
to selectively execute both modes, the device should 
have processing configurations for executing both 
modes. This causes a problem in that the cost of the 
device is increased. 

[0205] According to embodiments of the invention in 
accordance with either the cognizant mode or the non- 
cognizant mode, by generating a content-encryption 
key which is different from that used in the other mode, 
the two recording modes can be distinguished in accord- 
ance with the device and the recording mode used for 
recording the content, and a situation can be eliminated 
in which recording is performed with the two modes 
used in disorder. This implements a content processing 
configuration using either recording mode in accord- 
ance with the device and the recording mode used for 
recording the content, without increasing the configura- 
tion and processing load of the device. 
[0206] Specifically, an encryption/decryption-key 
generating key (cognizant key) as secret information 
(necessary for playback) for cognizant-mode recording 
is provided and stored in only a device having a function 
of recording or playback using the cognizant mode, and 
an encryption/decryption-key generating key (non-cog- 
nizant key) as secret information (necessary for play- 
back) for cognizant-mode recording is provided and 
stored in only a device having a function of recording or 
playback using the non-cognizant mode. 
[0207] In this construction, concerning, for example, 
a content recorded using the cognizant mode, a device 
that has only a non-cognizant-mode recording/playback 
function can be prevented from executing, by a bug, ma- 
nipulation of data, or unauthorized change of recording/ 
playback program, mistaken or dishonest recording/ 
playback. 

[0208] Referring back to Figs. 16 and 17, the descrip- 
tion of the content recording processing Is continued. 
[0209] The recording/playback device 1600 further 
acquires the generation number of the master key for 
use, namely, the generation number (generation #n) 
1650 of the master key to be stored by itself, and stores 
the acquired generation number as a recording-mode 
generation number 1651 on the recording medium 
1620. 

[0210] On the recording medium 1620 as a disk, there 
is a data management file that stores information about 
which data forms which title. In the data management 
file, a title key 1605, the recording mode flag 1635, and 
the recording-mode generation number 1651 can be 
stored. 

[0211] On the recording medium 1620, pre-recording- 
mode generation numbers are recorded beforehand. 
Only each content stored after being encrypted using a 
master key of a generation which is identical to a pre- 
recording-mode generation number or is newer than the 
pre-recording-mode generation number can be played 



back. This construction is described in playback 
processing descrit>ed later. 

[0212] Next, among combinations, namely, a combi- 
nation of a disk unique key and a title key. and combi- 
5 nations of a cognizant key or a disk unique key, the title 
key, and the non-cognizant key, any combination is used 
to generate a title unique key. 

[0213] Specifically, when the recording mode is the 
cognizant mode, the disk unique key, the title key, and 
10 the cognizant key are used to generate the title unique 
key. When the recording mode is the non-cognizant 
mode, the disk unique key, the title key, and the non- 
cognizant key are used to the title unique key. 
[0214] As described above, the encryption/decryp- 
ts tion-key generating key (cognizant key) as secret infor- 
mation for cognizant-mode recording is stored in only 
the device having the function of recording or playback 
using the cognizant mode, while the encryption/decryp- 
tion-key generating key (non-cognizant key) as secret 
20 information for cognizant-mode recording is stored in 
only the device having a function of recording or play- 
back using the non-cognizant mode. Accordingly, in a 
device adapted for either recording mode, either record- 
ing mode is selected and content recording is executed. 
25 In other words, the use of the recording mode is limited 
to either the use of the cognizant key or the user of the 
non -cognizant key. 

[021 5] In the case of a device in which both keys are 
stored and both recording modes can be executed, a 

30 process Is required which determines whether either re- 
cording mode should be executed. This mode determi- 
nation process, that is. a process for determining wheth- 
er the cognizant mode or the non-cognizant mode is 
used to perform content recording is described below 

35 with reference to Fig. 21 . 

[021 6] Basically, it is preferable to perform content re- 
cording by the cognizant mode if possible. This is, as 
described above, because Encryption Mode Indicator 
and embedded copy control information are prevented 

40 from being mismatched. However, there is a possibility 
that a data analysis error, etc.. occurs due to emergence 
of a new data format, etc., as described above, fn such 
a case, recording using the non-cognizant mode is ex- 
ecuted. 

45 [0217] Each step in Fig. 21 is described below. 

[0218] In step S5001, a recording device determines 
whether it can analyze a data fomnat. As described 
above, embedded copy control Information is embed- 
ded in a content, and impossibility of the data format 

50 analysis indicates that the reading of the copy control 
information is impossible. In this case, recording using 
the non-cognizant mode is executed. 
[0219] When the data format analysis is possible, the 
recording device proceeds to step 85002. and deter- 

55 mines whether it can perform data (content) decoding, 
the reading of embedded copy control information, and 
updating. The content and the embedded copy control 
information are normally encoded, so that the reading 



20 



39 



EP1 187 391 A2 



40 



of the embedded copy control information requires the 
execution of decoding. For example, in a case in which 
the device cannot perform decoding processing for the 
reason that a decoding circuit has already been used 
when multichannel simultaneous recording Is per- 
formed, the embedded copy control information cannot 
be read, so that recording using the non-cognizant 
mode is executed. 

[0220] In step S5002, if the recording device has de- 
termined that it can perform data (content) decoding, the 
reading of embedded copy control information, and up- 
dating, in step S5003. the recording device determines 
whether or not an input to the recording device by a user 
includes an input designating the execution of recording 
using the non-cognizant mode. Step S5003 is a step that 
Is executed in only a device in which mode selection 
designated by the user can be performed, and is not ex- 
ecuted in an ordinary device, that is, a device that does 
not allow the user to designate a mode. When the user 
inputs designation of the non-cognizant mode, record- 
ing using the non-cognizant mode is executed. 
[0221] In step S5004, the recording device deter- 
mines whether or not a content packet (e.g., received 
data) includes designation of executing recording using 
the non-cognizant mode. If the determination is affirm- 
ative, recording using the non-cognizant mode is exe- 
cuted. If the determination Is negative, recording using 
the cognizant mode is executed. 

[0222] In the device that can selectively execute re- 
cording using the cognizant mode and recording using 
the non-cognizant mode, the above-described mode 
determination process is used to determine the execu- 
tion of recording using either mode. However it is under- 
stood from Fig. 21 that when recording using the cogni- 
zant mode is possible, recording using the cognizant 
mode is basically executed. 

[0223] As described above, when the cognizant mode 
is used as the recording mode, the disk unique key, the 
title key. and the cognizant key are used to generate the 
title unique key, while when the non-cognizant mode is 
used the recording mode, the disk unique key. the title 
key, and the non-cognizant key are used to generate the 
title unique key. 

[0224] Fig. 22 shows specific methods for generating 
the title unique key. 

[0225] One method (example 1) uses a result ob- 
tained by inputting, to a hash function using a block en- 
cryption function, the title key. the disk unique key, and 
the cognizant key (in the case of the cognizant mode) 
or the non-cognizant key (in the case of the non-cogni- 
zant key). 

[0226] In another method, after Inputting, to hash 
function SHA-1 defined in FIPS PUB 180-1, data gen- 
erated by the bit concatenation of the master key, the 
disk ID. and the cognizant key (in the case of the cog- 
nizant mode) or the non-cognizant key (in the case of 
the non-cognizant key), only a necessary data length in 
the resultant 160-bit output is used as the title unique 
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key. 

[0227] In the above description, the master key, the 
stamper ID, and the disk ID are used to generate the 
disk unique key, and the disk unique key, and either the 
cognizant key or the non-cognizant key are used to gen- 
erate each title unique key. However, without using the 
disk unique key, by using the master key, the disk ID, 
the title key, and either the cognizant key or the non- 
cognizant key, the title unique key may be directly gen- 
erated. Also, without using the title key, by using the 
master key, the disk ID, and either the cognizant key or 
the non-cognizant key, a key corresponding to the title 
unique key may be generated. 

[0228] By way of example, when one of transmission 
formats defined in the above DTCP is used, there is a 
case in which data is transmitted by TS packets in 
MPEG-2- For example, when a set-top box (STB) which 
receives a satellite broadcast uses the DTCP to transmit 
the broadcast to a recording device, it is preferable that 
the STB send MPEG-2 TS packets transmitted via the 
satellite broadcast link, also on the IEEE 1394 because 
data conversion does not need to be performed. 
[0229] The recording/playback device 1600 receives 
content data to be recorded in the form of TS packets, 
and uses the TS processing unit 300 to add an arrival 
time stamp, which is information on the reception time 
of each TS packet. As described above, the block seed 
which is added to the block data may be formed by a 
combination of the arrival time stamp, the copy control 
information, and other information. 
[0230] By arranging X (e.g., 32) ATS-added TS pack- 
ets, one block of block data is formed (see the upper 
image in Fig. 5). As shown in Fig. 16 or 17, from a block 
seed having a 32-bit arrival time stamp, which is output 
by separating (selector 1608) the first to fourth bytes of 
the start of the block data input as data to be encrypted, 
and the already generated title unique key. a block key 
as a key for encrypting the data of the block data is gen- 
erated (1607). 

[0231] Fig. 23 shows two methods for generating the 
block key. In each method, from a 32-bit block seed and 
a 64-bit title unique key. a 64-bit block key is generated. 
[0232] In the upper example 1 , an encryption function 
is used which has a key length of 64 bits and an input/ 
output length of 64 bits. A title unique key is used as a 
key for the encryption function, and a result that is ob- 
tained by inputting to the encryption function a concate- 
nation value of a block seed and a 32-brt constant is 
used as a block key. 

[0233] In the lower example 2, hash function SHA-1 
defined in FIPS PUB 180-1 is used. Reduced data hav- 
ing 64 bits is used as a block key. For example, a con- 
catenation value of a title unique key and a block seed 
is input to hash function SHA-1. and from the resultant 
160-bit output, only lower-64-bit part is used. 
[0234] Using Fig. 23, examples in which the disk 
unique key. the title unique key. and the block key are 
generated have been described. However, without ex- 
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ecuting the generation of the disk unique key and the 
title unique key. the block key may be generated by us- 
ing, for each block, a master key. a stamper ID, a disk 
ID. a title key. a block seed, and a cognizant key (in the 
case of the cognizant mode) or a non-cognizant key (in 
the case of the non-cognizant mode). 
[0235] After the block key is generated, the generated 
block key is used to encrypt block data. As the bottom 
of Figs. 16 and 17 shows, the initial first to m-th (e.g., m 
= 8) bytes of the block data including the block seed are 
separated (by a selector 1608) and are not encrypted. 
The (m+1)th byte to the final byte are encrypted (1609). 
The m bytes that are not encrypted include the first to 
fourth bytes as a block seed. The block data after the 
(m+1)th byte which is separated by the selector 1608 
are encrypted (1609) in accordance with an encryption 
algorithm preset in the cryptosystem unit 1 50. For ex- 
ample, the Data Encryption^tandard (DES) defined in 
FIPS 46-2 can be used as the encryption algorithm. 
[0236] As described above, the block seed may in- 
clude copy control information. Accordingly, when re- 
cording using the cognizant mode is executed, copy 
control information that corresponds to embedded copy 
control Information, which is embedded in content data, 
is recorded. When recording using the non-cognizant 
mode is executed, copy control information that reflects 
the Encryption Mode Indicator (EMI) in the packet head- 
er In Fig. 20 is recorded. 

[0237] In other words, in the case of information re- 
cording processing using the cognizant mode, record- 
information generating processing is executed in which 
a block seed including copy control information based 
on embedded copy control information in data part is 
added to a block data composed of at least one packet. 
In the case of information recording processing using 
the non-cognizant mode, record-information generating 
processing is executed in which a block seed including 
copy control information based on the Encryption Mode 
Indicator as copy control information included in a pack- 
et is added to a block data composed of at least one 
packet. 

[0238] Here, when the block length (input/output data 
size) of an encryption algorithm for use is eight bytes as 
in the DES, by letting X be 32, and m be a multiple of 8, 
the entire block after the (m+ 1 )-th byte can be encrypted 
without generating a fraction. 

[0239] In other words, when assuming that the 
number of TS packets to be stored in one block is x, the 
input/output data size of the encryption algorithm is L 
bytes, and n is an arbitrary natural number, by determin- 
ing X, m. and L so that 192*X = m + n*L can hold, the 
need for fraction processing is eliminated. 
[0240] The encrypted block data after the (m+1)th 
byte is combined with the data of the first to m-th bytes 
by the selector 1610, and the combination is stored as 
encrypted content on the recording medium 1620. 
[0241] In the above-described processing, in units of 
blocks, contents are encrypted using a block key gen- 



erated based on a block seed including a generation- 
controlled master key and an arrival time stamp, and are 
stored on a recording medium. 

[0242] As described above, according to embodi- 

5 ments of the invention content data is encrypted using 
a generation-controlled master key, and is recorded on 
a recording medium. Thus, for enabling decoding or 
playback, it is conditioned that playback processing on 
the recording medium is performed by a recording/play- 

10 back device having the generation of a master key which 
is at least identical to or newer than the generation of a 
master key used for recording data. 
[0243] As described above, in the case of recording 
using the cognizant mode, the block key is generated 

15 based on the cognizant key. while in the case of record- 
ing using the non-cognizant mode, the block key is gen- 
erated based on the non-cognizant key. The data en- 
crypted using the modes can be read only by a device 
having a key (the cognizant key or the non-cognizant 

20 key) corresponding to a mode identical to that used for 
recording. 

[0244] In other words, the cognizant key is supplied 
only to a device that can recognize and update embed- 
ded copy control information which is embedded in a 
25 stream when performing recording and to a device al- 
lowed to read the data. A device that does not have the 
cognizant key cannot read a content recorded using the 
cognizant mode. 

[0245] Similarly, the non-cognizant key is supplied on- 
30 ly to a device having a non-cognizant recording mode 
that does not recognize embedded copy control infor- 
mation in a stream when recording is performed and to 
a device allowed to read data recorded in the mode. A 
device that does not have the non-cognizant key is de- 
35 signed so as not to a content recorded using the non- 
cognizant mode. Details of the playback processing are 
described later. 

[0246] Next, with reference to the flowchart shown in 
Fig. 18. both the arrival-time-stamp adding processing 
40 by the TS processing unit 300 and the encryption 
processing by the cryptosystem unit 150. which are ex- 
ecuted in accordance with data recording processing, 
are described below. 

[0247] In step S1801. the recording/playback device 
45 reads a master key and the cognizant key or the non- 
cognizant key from the memory 180. The recording/ 
playback device reads a stamper ID from a disk as a 
recording medium. 

[0248] In step S1802, the recording/playback device 
50 determines whether a disk ID has already been record- 
ed as identification information on the disk. If the deter- 
mination is affirmative, in step SI 803. the disk ID is read. 
If the determination is negative, in step S1804, the disk 
ID is generated randomly or by a predetermined meth- 
55 od. and is recorded on the recording medium. In step 
SI 805, a master key and a stamper ID are used to gen- 
erate a disk unique key. The disk unique key is found by 
applying, for example, a method using hash function 
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SHA-1 defined in FIPS PUB 180-1. a method using a 
hash function based on blocl< encryption, etc. 
[02491 In step S1806. a title key is generated as a 
unique key for each time of recording, and is recorded 
on the disk, with the recording mode and the generation 
number of the master key. The recording mode repre- 
sents a type of information recording mode, namely, ei- 
ther the cognizant mode or the non-cognizant mode. 
[02501 In step S1807. a title unique key is generated 
by using the disk unique key. the title key. and the cog- 
nizant key (in the case of the cognizant mode) or the 
non-cognizant key (in the case of the non-cognizant 
mode). 

[02511 '^'g- 24 is a detailed flowchart showing the gen- 
eration of the title unique key. In step S2001, the cryp- 
tosystem unit 1 50 proceeds to different steps depending 
the recording mode. This branching is determined 
based on the program of the recording/playback device 
and designation data input by a user of the recording/ 
playback device. 

[0252] In step S2001 , if the cryptosystem unit 1 50 has 
determined that the recording mode is the cognizant 
mode, it proceeds to step S2002, and generates the title 
unique key by using the disk unique key. the title key. 
and the cognizant key. 

[0253] In step S2001 , if the cryptosystem unit 1 50 has 
determined that the recording mode is the non-cogni- 
zant mode, it proceeds to step S2003, and generates 
the title unique key by using the disk unique key. the title 
key, and the non-cognizant key The title unique key is 
generated by using a method using hash function SHA- 
1 defined in FIPS PUB 180-1, and a method using a 
hash function based on block encryption. 
[0254] In step S1808, the recording/playback device 
receives, in the form of TS packets, data to be encrypted 
of content data to be recorded. In step S1809, the TS 
processing unit 300 adds each arrival time stamp (ATS) 
as information on a time at which each TS packet is re- 
ceived. Altematively, the TS processing unit 300 adds 
each value obtained by combining copy control informa- 
tion, an arrival time stamp, and other information. 
[02551 in step S1810. the recording/playback device 
sequentially receives the ATS-added TS packets, and 
determines whether the received packets has reached, 
for example, X = 32 which forms one block, or whether 
it has received identification data indicating the end of 
the packets. If either condition is satisfied, the recording/ 
playback device goes to step S1811, and forms one 
block of block data by arranging X ATS-added TS pack- 
ets or ATS-added TS packets up to the end packet. 
[0256] In step S1812, the cryptosystem unit 150 gen- 
erates a block key as an encryption key for encrypting 
the block data by using the first 32 bits (the block seed 
including the an-ival time stamp) and the title unique key 
generated in step SI 807. 

[0257] In step SI 81 3, the generated block key is used 
to the block data fomned in step S1811. As described 
above, the encryption range is the (m+1)th byte to the 



end byte of the block data. The Data Encryption Stand- 
ard defined in the FIPS 46-2 is applied to the encryption 

algorithm. 

[0258] In step SI 814, the encrypted block data is re- 
5 corded on the recording medium. In step S1815. the re- 
cording/playback device determines whether all data 
have been recorded. If the determination is affirmative, 
the recording is terminated. If the determination is neg- 
ative, the recording/playback device goes back to step 
10 S1808. and the remaining data is processed. 

[02591 In accordance with the above process, the 
content recording processing is executed using the cog- 
nizant mode or the non-cognizant mode. When the con- 
tent recording processing is executed by the cognizant 
15 mode, a key for use in content encryption is generated 
based on the cognizant key. When the content recording 
process is executed using the non-cognizant mode, a 
key for use in content encryption is generated based on 
the non-cognizant key. Accordingly, for the content re- 
20 corded on the disk, it is required that a decryption key 
be generated by using either of the cognizant key and 
the non-cognizant key. or a single key. This can prevent 
recording and playback processing in which both modes 
are used. 

25 

Writing and Playback of Secret Infomiation 



[0260] Next, secret-information writing and reading 
processes are described below in which secret informa- 

30 tion. such as the stamper ID 1680 shown in Fig. 16 or 
17, is written on the disk by using a manner different 
from an ordinary data-writing technique and in which the 
written secret information is allowed to be read only in 
the case of applying a manner different from an ordinary 

35 data-reading technique. 

Generation of Secret Infomnation By Signal Disturbance 

[0261] First, a structure In which various types of in- 
40 fonnation signals, such as the stamper ID 1680, are re- 
corded after being disturbed using M-series signals is 
described below. 

[0262] Fig. 25 shows the structure of a write-signal 
generating modulation circuit. The circuit shown in Fig. 
45 25 writes secret infomnation (such as the stamper ID 
1680) modulated based on an FG signal which rises 
whenever a disk on which data is written rotates by a 
predetermined angle. 

[0263] After generating, based on the FG signal, 
50 channel clocks CK which is synchronized with the rota- 
tion of the disk, a PLL circuit 1041 supplies the channel 
clocks CK to the components of the circuit. 
[0264] A timing generator (TG) 1 042 generates an in- 
itialization pulse signal SY for initializing M-series gen- 
55 erating circuits 1 045A to 1 045D at predetermined inter- 
vals by counting the channel clocks CK. The timing gen- 
erator 1042 also generates and outputs a synchroniza- 
tion pattern selection signal ST which is synchronized 
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with the initialization pulse signal SY 
t0265] Secret information, such as the stamper ID 
1680, is input to the modulation circuit in Fig. 25 at a bit 
rate which is extremely smaller than that of the channel 
clocks CK. A synchronizing pattern generating circuit 5 
1043 generates and outputs a predetermined synchro- 
nizing pattern DY based on the initialization pulse signal 
SY. 

[0266] The M-series generating circuits 1045A to 
1 045D are initialized by the initialization pulse signal SY, io 
and output M- series M1 to M4, respectively. The M-se- 
nes signals M1 to M4 are sthngs of data which have ran- 
domly changing logical values and in which a possibility 
that logic "1 " occurs and a possibility that logic "0" occurs 
are equal to each other. The M-series Ml to M4 signals f5 
do not have any mutual relationship. 
[0267] Arithmetic circuits (indicated by "X" in Fig. 25) 
1046A to 1046D are formed by exclusive OR circuits, 
and output the results of exclusive OR operations on the 
M-series signals Ml to M4 and the bits bO to b3 of secret 20 
information such as a stamper ID and a disk ID. This 
causes the secret information to be disturbed by the M- 
series signals M1 to M4. 

[0268] A random number generating circuit 1 047 gen- 
erates and outputs a 2-bit random number R (any value 25 
of 0. 1 . 2, and 3) to a data selector 1 048 in units of chan- 
nel clocks CK. In response to the value of the random 
number R. the data selector 1 048 selectively outputs the 
results of operations from the arithmetic circuits 1046A 
to 1046D. For example, when the random number R = 30 
0. the output of the arithmetic circuit 1046A is selected. 
When the random number R = 1 . the output of the arith- 
metic circuit 1046b is selected. When the random 
number R = 2, the output of the arithmetic circuit 1046C 
is selected. When the random number R = 3, the output 35 
of the arithmetic circuit 1046D is selected. 
[0269] In the above construction, by performing de- 
cryption based on the M-series signals Ml to M4, the 
results of operations by the arithmetic circuits 1046A to 
1046D are treated as a series and are further disturbed 40 
without being affected by other arithmetic operation re- 
sults. 

[0270] A data selector 1 049 selectively outputs the in- 
itialization pulse signal SY which is output from the syn- 
chronizing pattern generating circuit 1043 based on the ^5 
synchronization pattern selection signal ST. and the out- 
put of the data selector 1048. Accordingly, after the ini- 
tialization pulse signal SY rises, and a synchronizing 
pattern (e.g., "11011") in a predetermined clock period 
(e.g.. a 5-clock period) occurs, the data selector 1048 is so 
controlled to perform outputting. 

[0271] On the disk, in a predetermined secret infor- 
mation write area, the output of the modulation circuit in 
Fig. 25 is written. Even if the same secret information is 
input to the modulation circuit, the form of write data dif- 5f 
fers depending on the random number R. This makes it 
possible to perform writing of data that cannot be ana- 
lyzed in ordinary reading processing. 



[0272] Next, with reference to Fig. 26. the playback 
process on the secret information written in the above- 
described technique is described below. 
[0273] Fig. 26 shows the structure of a decryption 
processor that plays back the secret information such 
as a stamper ID by decrypting a digital playback signal 
DX read from the disk. Based on the digital playback 
signal DX. a PLL circuit 1081 reproduces and outputs 
the channel clocks CK to the components of the decryp- 
tion processor. 

[0274] After detecting a synchronizing pattern by 
identifying the digital playback signal DX based on the 
channel clocks CK, a synchronization detection circuit 
1082 reproduces the initialization pulse signal SY from 
the result of detection. Based on the Initialization pulse 
signal SY and the channel clocks CK. M-series gener- 
ating circuits 1083A to 1083D output the M-series sig- 
nals Ml to M4 generated in the writing mode. 
[0275] Multiplication circuits (indicated by "X" in Fig. 
26) 1084 A to 1084D multiply the M-series signals Ml to 
M4 by the digital playback signal DX, respectively, and 
output the products. In the multiplication circuits 1084A 
to 1084D, the polarity of the digital playback signal DX 
is inverted in accordance with the logical value of each 
of the M-series signals Ml to M4. whereby the multipli- 
cations are executed. The digital playback signal DX is 
played back only by decryption based on the M-series 
signals Ml to M4. 

[0276] Integrating circuits (indicated by "Z" in Fig. 26) 
1085A to 1085D integrate, based on the initialization 
pulse signal SY. the products output by the multiplication 
circuits 1084 A to 1084D. and output the integrated re- 
sults in accordance with the logical values of bits b1 to 
b3 of the secret information (e.g., stamper ID). Determi- 
nation circuits 1086A to 1086D perform binary identifi- 
cation based on the initialization pulse signal SY of the 
integrated results output by the integrating circuits 
1085A to 1085D, whereby the values of bits bO to b3 are 
reproduced and output. 

[0277] As described above, the secret information is 
input, as a string of four parallel bits bO to b3. to the mod- 
ulation circuit (Fig. 25). and are recorded after being dis- 
turbed by the four M-series signals Ml to M4 and the 
random number R. Thus, it is difficult to read the record- 
ed secret information in the ordinary reading process- 
ing. When playback is performed, the M-series signals 
Ml to M4 can be generated based on the synchronizing 
pattern DY, and the generated M-series signals Ml to 
M4 and the decryption of the read signal enable the se- 
cret information to be output. 

[0278] A recording/playback device which reads a 
stamper ID written by the above-described recording 
technique and which generates a content- encryption 
key based on the stamper ID or the like has a secret 
» information decrypting unit having the structure shown 
in Fig. 26. 
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Recording Secret Information in Inner Circumferential 
Part of Disk 



[0279] Next, concerning other secret-information writ- 
ing and reading processes, a construction is described 
below in which secret information (such as a stamper 
ID) is written in an area of the disk different from a write 
area for music data. etc.. and the written information is 
stably read. 

[0280] The top part (A) of Fig. 27 is a perspective view 
of a disk containing secret information such as a 
stamper ID. The secret information is recorded four 
times on one track of the disk, so that the secret infor- 
mation can be played back, even if the disk is partly 
damaged. The secret information includes areas for a 
header, a stamper ID. etc.. and an error conrecting code. 
Each bit of bit patterns indicating the Information is 
formed by a minute area unit having a dimension of 50 
^im, which is greatly longer than that of each bit of a data 
area recorded as user data. In each of the stamper ID 
area and the error con*ecting code area, a synchronizing 
pattern is formed in which among three minute areas, 
only the center area has a pattern formed by changing 
the optical property of the recording surface. The syn- 
chronizing pattern enables timing control in the playback 
mode. 

[0281] The data of the information area and the error 
correcting code area is divided into two-bit parts. When 
two-bit data (b1 , bO) is logic "00", the optical property of 
only the first minute area is changed, and the logic is 
converted to logic "1000" for recording, as shown in the 
part (D1) of Fig. 27. As shown in the part (D2) of Fig. 27, 
when two-bit data (b1 . bO) is logic "01", logic "0100" is 
recorded. As shown in the part (D3) of Fig. 27. when 
two-bit data (b1. bO) is logic "10", logic "0010" is record- 
ed. As shown in the part (D3) of Fig. 27, when two-bit 
data (b1, bO) is logic "11". logic "0001" is recorded. Ac- 
cordingly, on the disk, the percentage of presence of op- 
tical-property-changed areas is 0.3 or less, so that in the 
inner circumferential part of the disk, data reading can 
be performed since focussing servo control based on 
sufficient reflected light can be performed. 
[0282] Fig 28 shows the stnjcture of an decryption 
unit used for reading the secret information recorded in 
the inner circumferential part of the disk. A PLL circuit 
1160 uses the digital playback signal DX to reproduce 
and output the channel clocks CK. 
[0283] By determining the signal level of the digital 
playback signal DX based on the channel clocks CK, a 
synchronization detection circuit 1161 detects a syn- 
chronizing pattern and outputs an initialization pulse sig- 
nal SY. 

[0284] For the minute areas (parts (D1 ) to (D4) of Fig. 
27) following the synchronizing pattern (part (C) of Fig. 
27), a timing generator (TG) 1162 outputs, based on the 
initialization pulse signal SY, sampling pulse signals T1 
to T4 which rise in the centers of the minute areas. 
[0285] Flip-flops (FFs) 1163A to 1163D latch, based 



on the sampling pulse signals T1 to T4. digital playback 
signals. Accordingly, the signal levels of playback sig- 
nals which are obtained from the four minute areas as- 
signed to the two-bit data (b1 , bO) of the information ar- 
5 eas and the error correcting code area are latched and 
retained in the flip-flops 1163A to 1163D. 
[0286] By determining the magnitudes of the playback 
signal levels from the flip-flops 1 1 63A to 1 1 63D, the two- 
bit data (b1, bO) of the information areas and the error 
10 correcting code area are played back and output by a 
maximum detecting circuit 1164. A parallel/serial con- 
version circuit (PS) 1165 sequentially converts the two- 
bit data (b1, bO) into serial data and outputs the serial 
data. 

15 [0287] A recording/playback device which reads the 
stamper ID written by the above-described recording 
technique and which generates a content-encryption 
key based on the stamper ID Includes the decryption 
unit stnjcture shown in Fig. 28. 
20 [0288] As described above, by employing special se- 
cret-information writing and reading techniques different 
from those for contents, secret information such as a 
stamper ID is recorded on a disk, and the stamper ID is 
used as source data for keys for use in content encryp- 
25 tion and decryption. Thus, if another processing key 
leaks, it is impossible to read the secret information, and 
a possibility of leak can be greatly reduced. This enables 
security-enhanced content protection. 
[0289] This Specification describes a case in which 
30 the secret information required for writing and playback 
of specified information to be recorded on the disk is set 
as a stamper ID. However, the secret information is not 
limited to the stamper ID. It is possible that various types 
of identification data, such as IDs set for disks, and dif- 
35 ferent content IDs set for contents, or encryption keys 
or the like, be set as secret information to be recorded 
on the disk. By applying these types of secret informa- 
tion, a content-encryption key is generated. 
[0290] The above recording/playback device has a 
40 structure capable of selectively using a key for generat- 
ing an encryption/decryption key for recording using the 
cognizant mode and a key for generating an encryption/ 
decryption key for recording using the non-cognizant 
mode, as shown in Fig. 16 or 17. A recording/playback 
45 device that executes only one of the modes stores either 
key, that is. a cognizant key or a non-cognizant key. and 
generates, based on the stored key, a block key for con- 
tent encryption and decryption. Block diagrams that 
show the process of generating a content-encryption 
50 key in each recording/playback device storing a single 
key are shown in Figs. 29 and 30. 
[0291] Fig. 29 shows a recording/playback device 
having only a cognizant key. This recording/playback 
device generates, based on the cognizant key and key 
55 generating data, an encryption key and a decryption key 
which are used for data recording on a recording medi- 
um and data playback from the recording medium in or- 
der to execute content encryption and decryption. 
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t0292] Fig. 30 shows a recording/playback device 
Slaving only a non-cognizant key. This recording/play- 
back device generates, based on the non-cognizant key 
and key generating data, an encryption key and a de- 
cryption key which are used for data recording on a re- 
cording medium and data playback from the recording 
medium in order to execute content encryption and de- 
cryption. 

[0293] In each recording/playback device storing a 
single type of key, data recording/playback can be exe- 
cuted only in either mode. 

Content-Data Decryption and Playback Processing 
Using Generation-Controlled Master Key 

[0294] Next, processing in which encrypted contents 
recorded as described above on the recording medium 
are decrypted and played back is described below using 
the block diagram shown in Fig. 31 and the flowcharts 

shown in Figs. 32 to 34. 

[0295] Conceming the decryption and playback proc- 
ess, the process flow is described in accordance with 
the flowchart in Fig. 32. with reference to the block dia- 
gram in Fig. 31. 

[0296] In Fig. 32. in step S2401 . a recording/playback 
device 2300 (Fig. 31) reads a disk ID 2302. a pre-re- 
cording-mode generation number 2350, and a stamper 
ID 2380 from a disk 2320. and also reads a master key 
2301, a cognizant key 2331 and/or a non-cognizant key 
2332 from its memory. As is clear from the above de- 
scription of the recording process, the disk ID 2303 Is 
recorded on the disk 2320 beforehand, or if it is not re- 
corded, the disk ID 2303 is a disk unique identifier in 
which the identifier is generated in the recording/play- 
back device 2300 and is recorded on the disk 2320. 
[0297] The pre-recording-mode generation number 
2360 is generation information which is beforehand 
stored on the disk 2320 as a recording medium and 
which is unique to the disk 2320. By comparing the pre- 
recording-mode generation number 2360 and the gen- 
eration of the master key 2301 which is obtained in data 
recording, that is, a recording-mode generation number 
2350, determination of whether or not the playback 
process can be performed. The master key 2301 is a 
generation-controlled secret key which is stored in the 
memory of the recording/playback device 2300 in ac- 
cordance with the flow in Fig. 14. The cognizant key and 
the non-cognizant key are secret keys common in sys- 
tem, which correspond to the cognizant mode and the 
non-cognizant mode, respectively. 
[0298] In step S2402. the recording/playback device 
2300 reads, from the disk 2320. a title key 2305 corre- 
sponding to data to be read, a (data) recording mode 
2335, and the generation number of a master key used 
when recording data, that is. the recording- mode gen- 
eration number 2350. In step S2403. the recording/play- 
back device 2300 determines whether or not data to be 
read can be played back. The detailed flowchart of the 



determination is shown in Fig. 33. 
[0299] in Fig. 33. in step S2501. the recording/play- 
back device 2300 determines whether or not the record- 
ing-mode generation number 2350 read in step S2402 
5 is newer than the pre-generation number 2360 read in 
step S2401. If the recording/playback device 2300 has 
determined that the generation represented by the re- 
cording-mode generation number 2350 does not follow 
the generation represented by the pre-generation 
10 number 2360. in other words, when the generation rep- 
resented by the recording-mode generation number 
2350 is older than the generation represented by the 
pre-generation number 2360. the recording/playback 
device 2300 determines that playback is Impossible. 
15 The recording/playback device 2300 skips over steps 
2404 to S2409 and terminates the process without per- 
forming playback. Accordingly, when the contents re- 
corded on the disk 2320 are encrypted based on the 
master key 2301 having a generation older than the gen- 
20 eration represented by the pre-recording generation 
number 2360, a playback of the contents is not allowed 
and the playback is not performed. 
[0300] Specifically, when an unauthorized conduct is 
detected, the above processing determines that the un- 
25 authorized conduct corresponds to a case in which data 
is encrypted based on an old master key by using an 
authorized recorder which is not supplied with a latest 
generation master key and the encrypted data is record- 
ed, whereby the above processing prevents a recording 
30 medium containing the inappropriately recorded data 
from being played back. This can exclude the use of the 
unauthorized recorder. 

[0301] In step S2 501. if the recording/playback device 
2300 has determined that the generation represented 

35 by the recording-mode generation number 2350 follows 
the generation represented by the pre-generation 
number 2360. in other words, when the generation rep- 
resented by the recording-mode generation number 
2350 is identical to or newer than the generation repre- 

40 sented by the pre-generation number 2360, and the re- 
corded contents are encrypted based on a master key 
whose generation follows the generation represented 
by the pre-generation number 2360. the recording/play- 
back device 2300 goes to step S2502. In step S2502. 

45 after the recording/playback device 2300 acquires gen- 
eration information on encryption master key C stored 
in its memory, it determines whether or not the genera- 
tion of the encryption master key C is identical to/newer 
than the generation represented by the recording-mode 

50 generation number 2350 and determines by comparing 
both generations 

[0302] In step S2502, if the recording/playback device 
2300 has determined that the generation of the encryp- 
tion master key C does not follow the generation repre- 
55 sented by the recording-mode generation number 2350, 
in other words, when the generation of the encryption 
master key C which is stored in the memory is older than 
the generation represented by the recording-mode gen- 
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eration number 2350. the recording/playback device 
2300 determines that a playback is impossible, and ter- 
minates this processing without performing the play- 
back process by skipping over steps S2404 to S2409. 
[0303] Conversely, in step S2502. if the recording/ 
playback device 2300 has determined that the genera- 
tion of the encryption master key C follows the genera- 
tion represented by the recording-mode generation 
number 2350, in other words, when the generation of 
the encryption master key C which is stored in the mem- 
ory is identical to or newer than the generation repre- 
sented by the recording- mode generation number 2350, 
the recording/playback device 2300 goes to step S2503 . 
In step S2503, the recording/playback device 2300 de- 
termines whether or not it possesses a key correspond- 
ing to the recording mode, that is, a cognizant key or a 
non-cognizant key. 

[0304] In step S2503, if the recording/playback device 
2300 has determined that it possesses the cognizant 
key or the non-cognizant key, it determines that a play- 
back is possible. If it does not possess the cognizant 
key or the non-cognizant key, it determines that the play- 
back is impossible. 

[0305] When the playback is possible, the recording/ 
playback device 2300 goes to step S2404. In step 
S2404, the disk ID 2303, the master key 2301. and the 
stamper ID 2380 are used to generate (2302 in Fig. 31) 
a disk unique key. Methods of generating the disk 
unique key include the following two methods: in one 
method, after inputting, to hash function SHA-1 defined 
in the FIPS 180-1 . data generated by bit concatenation 
of the a master key and a disk ID. only a necessary data 
length in the resultant 160-bit output is used as the disk 
unique key; and in another method, by inputting, to a 
hash function using a block encryption function, a mas- 
ter key and a disk ID, the obtained result is used. The 
master key being used here is one read in step S2402 
in Fig. 32. which has the generation (time) represented 
by the recording-mode generation number. If the record- 
ing/playback device 2300 retains a master key having 
a newer generation, the above method is used to create 
a master key having the generation represented by the 
recording-mode generation number, and a disk unique 
key may be generated using the generated master key. 
[0306] In step S2405. a title unique key is generated. 
A detailed flowchart for generating the title unique key 
is shown in Fig. 34. In step S2601, thecryptosystem unit 
150 executes determination of a recording mode. This 
determination is executed based on the recording mode 
2335 read from the disk 2320. 

[0307] In step S2601 . if the cryptosystem unit 150 has 
determined that the recording mode is the cognizant 
mode, it goes to step S2602. and generates the title 
unique key by using the disk unique key, the title key, 
and the cognizant key. 

[0308] In step S260 1 . if the cryptosystem unit 1 50 has 
determined that the recording mode is the non-cogni- 
zant mode, it goes to step S2603. and generates the 



title unique key by using the disk unique key, the title 
key, and the non-cognizant key. For generating the title 
unique key, a method using hash function SHA-1 . and 
a hash function based on block encryption are used. 

5 [0309] In the above description, by using a master 
key. a stamper ID. and a disk ID, the disk unique key is 
generated, and by using the generated disk unique key. 
and a cognizant key or a non-cognizant key. a title 
unique key is generated. However, without using the 

TO disk unique key. by using the master key. the stamper 
ID. the disk ID, the title key, and the cognizant key or the 
non-cognizant key. the title unique key may be directly 
generated. Also, without using the title key. by using the 
master key the stamper ID. the disk ID. and the cogni- 

15 zant key or the non-cognizant key. a key corresponding 
to the title unique key may be generated. 
[0310] In step S2406, block data is sequentially read 
from encrypted content 2312 recorded in encrypted 
form on the disk 2320. In step S2407, a selector 2310 

20 separates first four bytes as a block seed from the block 
data. The block seed, and the title unique key generated 
in step S2405 are used to generate a block key 
[0311] For generating the block key, the above con- 
structions in Figs. 23A and 23B can be applied. In other 

25 words, a technique can be applied in which by using a 
32-bit block seed and a 64-bit title unique key. a 64-bit 
block key can be generated. 

[0312] In the above description, each of the disk 
unique key, the title unique key, and the block key is gen- 
30 erated. However, for example, without executing the 
generation of the disk unique key and the title unique 
key. the block key may be generated for each block by 
using the master key, the stamper ID, the disk ID, the 
title key. the block seed, and the cognizant key or the 
35 non-cognizant key. 

[031 3] After the block key is generated, in step S2408, 
the block data encrypted using the block key is decrypt- 
ed (2309), and is output as decrypted data via a selector 
2308. In the decrypted data, arrival time stamps are add- 
40 ed to transport packets constituting a transport stream. 
In the above-described TS processing unit 300, stream 
processing based the arrival time stamps is executed. 
After that, data can be used in the form of. for example, 
displaying an Image, and playing music. 
45 [0314] As described above, contents recorded on a 
recording medium after being encrypted in units of 
blocks can be played back such that the contents are 
decryption-processed using a block key generated 
based on a block seed including a arrival time stamp. 
50 [0315] After using the block key to decrypt the en- 
crypted block data, in step S2409, the recording/play- 
back device 2300 determines whether the reading of all 
data is completed. If all data have already been read, 
this process ends. If the determination is negative, the 
55 recording/playback device 2300 goes back to step 
S2406 and reads the remaining data. 
[0316] The above recording/playback device 2300 
has a structure capable of selectively using an encryp- 
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llon/decryptlon-key generating key (cognizant key) for 
the cognizant mode and an encryption/decryption-key 
generating key (non-cognizant key) for the non-cogni- 
zant mode, as shown In Fig. 31. As shown in Figs. 29 
and 30, In a recording/playback device that stores only 
one of the keys, that Is, the cognizant key or the non- 
cognizant key. only the recording mode corresponding 
to the stored key of either mode Is executed, and a con- 
tent-decrypting block key is generated based on the 
stored key. 

Processing Configuration Using Media Key Effective 
Only In Recording Medium 

[03171 In the above embodiment, an enabling key 
block is used to transmit a master key to each recording/ 
playback device. The recording/playback device uses 
the master key to record and play back data. 
[0318] A master key is a key that is effective in the 
entire record of data at the point thereof. A recording/ 
playback device that has obtained a master key at a 
point is allowed to decrypt data recorded at the point 
and data recorded in system prior to the point. However, 
from the property of the master key in which it is effective 
in the entirety of the system, a defect occurs in that the 
exposure of the master key affects the entirety of the 
system. 

[0319] By setting a key transmitted using an enabling 
key block of a recording medium so that it Is used not 
as a master key effective in the entire system but as a 
media key effective in only the recording medium, the 
influence of exposure of the key can be suppressed. A 
method that using a media key instead of a master key 
is described below as a second embodiment of the 
present invention. Differences from the above first em- 
bodiment are described. 

[0320] Similarly to Fig. 13, Fig. 35 shows that after de- 
vice 0 generates updating node key K(t)00 by using an 
enabling key block at a point t which is recorded on the 
recording medium, and leaf key KOOOO and node keys 
KOOO and KOO which are stored in device 0, device 0 
uses node key K(t)00 to obtain updating media key K 
(Omedia- "^^^ Obtained updating media key K(t)nTedia 's 
used when performing data recording on the recording 
medium and playback of the data. 
[0321] In Fig. 35. the pre-recording generation 
number Is not essential because concerning the media 
key. there is no concept of old and new generations, dif- 
ferently from the master key 

[0322] When a recording medium is loaded into each 
recording/playback device for data recording or play- 
back, the recording/playback device calculates media 
key K{t)r„gjji3 for the recording medium in accordance 
with the flowchart shown in Fig. 36, and uses the updat- 
ing media key K(t)media access the recording medium. 
[0323] The reading of an enabling key block In step 
S2801 and the processing of the enabling key block in 
step S2802 (Fig. 36) are similar to steps S1403 and 



S1404 in Fig. 14. 

[0324] In step S2803, the recording/playback device 
reads, from the recording medium, code Enc(K(t)00, K 
(Qmedia) Obtained by using node key K(t)00 to encode 

5 media key K(t)^dia step S2804, the recording/play- 
back device obtains the media key by decrypting the 
read code. If the recording/playback device Is revoked 
from a group in the tree structure shown in Fig. 11, the 
media key cannot be obtained and recording on the re- 

10 cording medium and playback cannot be performed. 
[0325] Next, data recording on the recording medium 
is described. Concerning the media key, there is no con- 
cept of old and new generations, differently from the 
master key. Thus, determination in the first embodiment 

15 (Fig. 15) of whether or not recording can be performed 
by comparing the pre-recording generation Information 
and the generation of the master key is not performed, 
and it is determined that recording is possible if the me- 
dia key has been obtained In the above process. Spe- 

20 clflcally, this is shown in the flowchart shown In Fig. 37. 
In Fig. 37, Instep S29 01, the process determines wheth- 
er the media key has already been obtained. If the media 
key has been obtained, a content recording process is 
executed in step S2902. 

25 

Data Recording Process Using Media Key Effective in 
Only Recording Medium 

[0326] The content recording process is described 

30 below with the block diagrams shown in Figs. 38 and 39 
and with the flowchart shown in Fig. 40. 
[0327] In the second embodiment, an optical disk is 
used as an example of a recording medium, similarly to 
the first embodiment. The first embodiment Is also sim- 

35 liar to the second embodiment in that in order that data 
on the recording medium may be prevented from being 
copied, a disk ID as identification information unique to 
the recording medium influences a data encrypting key. 
[0328] Figs. 38 and 39 correspond to Figs. 16 and 17 

40 In the first embodiment, and differ in that a media key is 
used instead of the master key and in that a recording- 
mode generation number that represents a master key 
generation is not used. Fig. 38 differs from Fig. 39 in that 
the writing of the disk ID is executed, similarly to the dlf- 

45 ference between Fig. 16 ad Fig. 17. 

[0329] Fig. 40 shows the data recording process of 
the second embodiment which uses the media key. The 
flowchart in Fig. 40 corresponds to that in Fig. 18 (the 
first embodiment). The flowchart in Fig. 40 is described 

50 below, mainly concerning differences from the first em- 
bodiment. 

[0330] In Fig. 40. in step S3201 , a recording/playback 
device 3000 reads a cognizant key and/or a non-cogni- 
zant key which are stored in Its memory, and the media 
55 key K(t)media temporarily stored after being calculated 
in step S2804 in Fig. 36. The recording/playback device 
300 also reads a stamper ID from the disk. 
[0331] In step S3203. the recording/playback device 
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3000 determines whether or not a disk ID has already 
been recorded as identification information on the re- 
cording medium (optical disk). If the disk ID has already 
been recorded, in step S3203, the recording/playback 
device 300 reads the disk ID (in the case of Fig. 38). If 
the disk ID has not already been recorded, in step 
S3204, a disk ID is generated by using a predetermined 
manner and is recorded on the disk (in the case of Fig. 
39). The disk ID can be stored in a lead-in area or the 
like because the disk needs to have one disk ID. In either 
case, the recording/playback device 3000 goes to step 
S3205. 

[0332] In step S3205, the media key and the stamper 
ID which are read in step S3201 are used to generate 
a disk unique key. A specific method of generating the 
disk unique key is Identical to that used in the first em- 
bodiment, and the media key may be used instead of 
the master key. 

[03331 In step S3206, a key that is unique to each time 
of recording, namely, a title key is generated randomly 
or by a predetermined method, and is recorded on the 
disk. Simultaneously, a recording mode activated when 
recording the title (data) is recorded on the disk. 
[0334] The disk contains a data management file stor- 
ing information that which data forms which title. The 
title key and the recording mode can be stored in the 
data management file. 

[0335] A description of steps S3207 to S321 5 is omit- 
ted since they are similar to steps SI 807 to S 181 5 in 

Fig. 18. 

[0336] In the above deschption, a disk unique key is 
generated by using a media key, a stamper ID, and a 
disk ID, and a titie unique key is generated by using the 
disk unique key, a title key, a cognizant key or a non- 
cognizant key. However, without using the disk unique 
key, by using the media key. the stamper ID. the disk ID. 
the title key, and the cognizant key or the non-cognizant 
key, the title unique key may be directly generated. Also, 
without using the title key, by using the stamper ID, the 
disk ID, and the cognizant key or the non-cognizant key, 
a key corresponding to the title unique key may be gen- 
erated. 

[0337] As deschbed above, data can be recorded on 
the recording medium by using the media key. 

Data Playback Process Using Media Key Effective in 
Only Recording Medium 

[0338] A process for playing back the data recorded 
as described above is described below with reference 
to the block diagram shown in Fig. 41 and the flowchart 
shown in Fig. 42. 

[0339] Fig. 41 corresponds to Fig. 31 in the first em- 
bodiment, and differs in that since a media key is used 
instead of the master key, a recording-mode generation 
number is omitted. 

[0340] In Fig. 42. in step S3401 , a recording/playback 
device 3400 reads a stamper ID and a disk ID from a 



disk 3420 as a recording medium, and also reads a cog- 
nizant key and/or a non-cognizant key and tine media 
key temporarily stored after being calculated in step 
S2804 in step S36. 
5 [0341] When the media key cannot be obtained by 
performing the process shown in Fig. 36 after loading 
the recording medium, the playback process is not per- 
formed and terminated. 

[0342] In step S3402, the titie key of data to be read 
10 from the disk 3320, and a recording mode stored when . 
recording the data are read. 

[0343] In step 83403, the recording/playback device 
3300 determines whether or not the data can be played 
back. The details' of step S3403 are shown in Fig. 43. 

15 [0344] In step S3501, the recording/playback device 
3300 determines whether or not the media key Is ob- 
tained. If the media key is not obtained, a playback Is 
impossible. If the media key Is obtained, the recording/ 
playback device 3300 goes to step S3502. Step S3502 

20 is similar to step S2503 in Fig. 33. When the recording/ 
playback device 3300 possesses a key corresponding 
to a recording mode used when recording the data (a 
cognizant key for the cognizant mode or a non-cogni- 
zant key for the non-cognizant mode), the recording/ 

25 playback device 3300 determines that a playback is 
possible, and goes to step S3404. When the recording/ 
playback device 3300 possesses the key, it determines 
that a playback is impossible, and skips over steps 
S3404 to 834 09 and terminates the process without per- 

30 forming the playback. 

[0345] A description of steps 83404 to S3409 is omit- 
ted since they are similar to steps S2404 to S2409 in 
Fig. 32. 

[0346] In the above description, by using a media key, 
35 a stamper ID, and a disk ID, a disk unique key is gener- 
ated, and by using the disk unique key, a titie key, a cog- 
nizant key or a non-cognizant key, a titie unique key is 
generated- However, without using the disk unique key, 
by using the media key, the stamper ID, the disk ID, the 
40 title key, and the cognizant key or the non-cognizant key, 
the title unique key may be directiy generated. Also, 
without using the title key, by using the media key, the 
stamper ID, the disk ID, and the cognizant key or the 
non-cognizant key, a key corresponding to the tlUe 
45 unique key may be generated. 

[0347] As described above, data recording on the re- 
cording medium and the playback from the recording 
medium are executed. 

50 Copy Control in Recording Process 

[0348] To protect advantages of a content copyrighter, 
content copying should be controlled in a licensed de- 
vice. 

55 [0349] Specifically, when a content is recorded on a 
recording medium, it is required that after determining 
whether the content may be copied, only a content al- 
lowed to be copied be recorded. When a content record- 
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ed on the recording medium is played back and output, 
tt is required that unauthorized copying of the output 
content be prevented. 

[0350] Accordingly, processing by the recording/play- 
back device 100 or 200 in Fig. 1 or 2 in a case in which 
content recording and playback is performed while per- 
forming the content copy control is described below with 
reference to the flowcharts shown in Figs. 44A to 45B. 
[0351 ] When a digital signal content from the exterior 
is recorded on the recording medium, the recording 
process shown in Fig. 44A is performed. This recording 
process is described using the recording/playback de- 
vice 100 shown in Fig. 1 as an example. When a digital 
signal content (digital content) is supplied to the input/ 
output l/F 120 via, for example, an IEEE 1394 serial bus, 
in step S4001, the input/output l/F 120 receives the dig- 
ital content and goes to step S4002. 
[0352] In step S4002, the inpuVoutput l/F 120 deter- 
mines whether the received digital content may be cop- 
ied. Specifically, when the content received by the input/ 
output l/F 120 is not encrypted, for example, when a 
plaintext content is supplied to the input/output l/F 120 
without using the above-described DTCP. the input/out- 
put l/F 1 20 determines that the received content may be 
copied. 

[0353] It is assumed that the recording/playback de- 
vice 1 00 is a device based on the DTCP which executes 
the process in accordance with the DTCP. The DTCP 
defines 2-bit Encryption Mode Indicator as copy control 
information for controlling copying. When the Encryption 
Mode Indicator is "OOB" where B indicates that the ad- 
jacent value is a binary number, the content is of "Copy- 
freely" type. When the Encryption Mode Indicator is 
"0 1 B'*, the content is of a "No-more-copies" type in which 
the content may not be more copied. When the Encryp- 
tion Mode Indicator is "1 OB", the content is "Copy-one- 
generation" type in which the copying of the content can 
be performed once. When the Encryption Mode Indica- 
tor is "118", the content is "Copy-never" type in which 
copying of the content is Inhibited. 
[0354] When the signal supplied to the Input/output 1/ 
F 120 in the recording/playback device 100 includes an 
Encryption Mode Indicator, and the Encryption Mode In- 
dicator is of a type among Copy-freely and Copy-one- 
generation types, the input/output l/F 120 determines 
that the content may be copied. When the Encryption 
Mode Indicator is of a type among No- more-copies and 
Copy-never types, the input/output l/F 120 determines 
that the content is not allowed to be copied. 
[0355] In step S4002, if the input/output l/F 120 has 
determined that the content may not be copied, steps 
S4003 to S4005 are skipped over and the recording 
process is terminated. Accordingly, in this case, the con- 
tent is not recorded on the recording medium 195. 
[0356] In step S4002. if the input/output l/F 120 has 
determined that the content may be copied, the process 
goes to step S4003. After that, steps S4003. S4004. and 
S4005 are performed which are similar to steps S302, 



S303, and S304 shown in Fig. 3B. In other words, the 
addition by the TS processing unit 300 of the arrival time 
stamp to the transport packet, and encryption process- 
ing by the cryptosystem unit 150 are executed. The re- 

5 sultant encrypted content is recorded on the recording 
medium 195, and the recording process is terminated. 
[0357] The Encryption Mode Indicator is included in 
the digital signal supplied to the input/output l/F 120. so 
that when the digital content is recorded, an Encryption 

10 Mode Indicator or information (e.g.. embedded copy 
control information in the DTCP. etc) which represents 
a copy-control status similarly to the Encryption Mode 
Indicator are also recorded, with the digital content. 
[0358] In the recording, In general, information which 

15 represents Copy-One-Generation type is recorded after 
being converted into Information which represents No- 
more-copies type so that more copies are not allowed. 
[0359] In a recording/playback device of an embodi- 
ment of the invention, copy control information, such as 

20 Encryption Mode Indicator and embedded copy control 
information, is recorded in a form in which it is added to 
the TS packet. In other words, 32 bits which Include an 
arrival time stamp having 24 to 30 bits and copy control 
information, as shown in examples 2 and 3 of Fig. 10, 

25 are added to each transport stream (TS) packet, as 
. shown in Fig. 5. 

[0360] When an analog signal content from the exte- 
rior is recorded on the recording medium 195, the re- 
cording process shown in Fig. 44B is performed, which 

30 is described below. 

[0361] When the analog signal content is supplied to 
the input/output l/F 140, the input/output l/F 140 re- 
ceives the analog signal content in step S4011 and goes 
to step S4012. In step S4012, the analog signal content 

35 determines whether the received analog signal content 
may be copied. 

[0362] The determination in step 84012 is performed 
by, for example, determining whether or not the signal 
received by the input/output l/F 140 includes a Macro- 

40 vision signal or a CGMS-A (Copy Generation Manage- 
ment System-Analog) signal. The Macrovision signal is 
a signal that becomes noise after being recorded on a 
VHS videocassette tape. When this is included in the 
signal received by the input/output l/F 140. the input/ 

45 output l/F 140 determines that the analog content is not 
allowed to be copied. 

[0363] The CGMS-A signal is such that a CGMS sig- 
nal for use in digital signal copy control is applied to an- 
alog signal copy control . The CG MS- A signal represents 
50 one of Copy-freely type in which the content is allowed 
to be freely copied. Copy-one-generation type In which 
the copying of the content can be performed only once, 
and Copy-never type in which copying of the content is 
inhibited. 

55 [0364] Accordingly, when the CGMS-A signal is in- 
cluded in the signal received by the input/output l/F 140 
and represents one of the Copy-freely type and the 
Copy-one-generation type. It is determined that the an- 
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alog content may be copied. The CGMS-A signal rep- 
resents the Copy-never type, it is determined that the 
analog content is not allowed to be copied. 
[0365] In addition, for example, when the Macrovision 
signal and the CGMS-A signal are not included in the 
received by the Input/output l/F 1 40, it is determined that 
the analog content may be copied. 
[0366] In step S4012, If the input/output l/F 140 has 
determined that the analog content is not allowed to be 
copied, it skips over steps S4013 to S4017 and termi- 
nates the recording process. Accordingly, in this case, 
the content is not recorded on the recording medium 
195. 

[0367] In step S4012. if the input/output l/F 140 has 
determined that the analog content may be copied, It 
goes to step S4013. After that, steps S4013 to S4017 
are performed which are similar to steps S322 to S326 
shown in Fig. 3B, whereby after performing MPEG en- 
coding, TS processing, and encryption processing, the 
content is recorded on the recording medium 195 and 
the recording ends. 

[0368] When the analog signal received by the input/ 
output l/F 140 Includes the CGMS-A signal, and the an- 
alog content is recorded on the recording medium 195, 
the CGMS-A signal is also recorded. The CGMS-A sig- 
nal is recorded in the copy control information or the oth- 
er information shown in Fig. 1 0. In the recording, in gen- 
eral, information which represents Copy-One-Genera- 
tion type is recorded after being converted into informa- 
tion which represents No-more-copies type so that more 
copies are not allowed. Although in the system, copy 
control information such as the Copy-one-generation 
type is recorded without being converted into the No- 
more-copies type, this does not apply to a case in which 
there is a rule that the copy control information is treated 
as the No-more-copies type. 

Copy Control in Playback Process 

[0369] Next, in a case in which the content recorded 
on the recording medium 195 is played back and output 
as a digital content to the exterior, the playback process 
shown in Fig. 45A is performed, which is described be- 
low. 

[0370] First, steps S4101 , S4102, and S4103 are per- 
fomned which are similar to steps 8401. 3402, and 
S403, whereby the encrypted content read from the re- 
cording medium 195 is decrypted in the cryptosystem 
unit 1 50 and is processed by transport stream process- 
ing. The processed digital content Is supplied to the in- 
put/output l/F 120 via the bus 110. 
[0371] in step S4104. the input/output l/F 120 deter- 
mines whether or not the supplied digital content may 
not be copied later. In other words, when the digital con- 
tent supplied to the input/output l/F 1 20 does not include 
an Encryption Mode Indicator or information (copy con- 
trol information) representing a copy control status, it is 
determined that the content may not be copied later. 



[0372] When the digital content supplied to the input/ 
output l/F 1 20 includes copy control information such as 
Encryption Mode Indicator, accordingly, when copy con- 
trol Information such as Encryption Mode Indicator is re- 
5 corded in accordance with the DTCP in content record- 
ing, the recorded copy control information (recorded En- 
cryption Mode Indicator) is of Copy-freely type, it is de- 
termined that the content may not be copied later. When 
copy control information such as Encryption Mode Indi- 
10 cator is of No-more-copies type. It is determined that the 
content is not allowed to be later copied. 
[0373] In general, there is no case in which the record- 
ed copy control information (Encryption Mode Indicator) 
is of Copy-one-generation type or Copy-never type. This 
15 is because the Copy-one-generation type of Encryption 
Mode Indicator is converted to No- more-copies type of 
Encryption Mode Indicator when performing recording 
and because a digital content having Copy-never type 
of Encryption Mode Indicator is not recorded on a re- 
20 cording medium. 

[0374] In step S4104, if the input/output l/F 120 has 
determined that the digital content may not be copied 
later, it goes to step S4105, and outputs the digital con- 
tent to the exterior. After that, the playback process 
25 ends. 

[0375] In step S4104, if the input/output l/F 120 has 
determined that the digital content may not be copied 
later, it goes to step S4106. In step S4106, the input/ 
output l/F 1 20 outputs the digital content to the exterior 
30 in accordance with the DTCP so that the digital content 
cannot be later copied. After that, the playback process 
ends. 

[0376] In other words, when the recorded copy control 
information (Encryption Mode Indicator) is of No-more- 
35 memories type, or in a case in which the system has a 
rule that Copy-one-generation type of copy control in- 
formation is recorded without being converted into No- 
more-memories type of copy control information, and 
copy control information (Encryption Mode Indicator) re- 
40 corded under the rule is of Copy-one-generation type, 
the content may not be more copied. 
[0377] Accordingly, the input/output l/F 120 performs 
mutual authentication with another device in accord- 
ance with the DTCP standard. When the device is right 
45 (or is based on the DTCP standard), the digital content 
is encrypted and output to the exterior. 
[0378] Next, in a case in which the content recorded 
on the recording medium is played back and output as 
an analog content to the exterior, the playback process 
50 shown in Fig. 45B is performed, which is described be- 
low. 

[0379] Steps S41 11 to S4 11 5 are performed which are 
similar to steps S421 to S425 shown in Fig. 4 B. In other 
words, the reading of the encrypted content, transport 
55 stream processing. MPEG decoding, and D/A conver- 
sion are executed. The obtained analog content is re- 
ceived by the input/output l/F 140. 
[0380] In step S4116, the Input/output l/F 140 deter- 
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mines whether or not the supplied content may be cop- 
ted. If copy control information such as Encryption Mode 
Indicator is not recorded with the content, the input/out- 
put l/F 140 determines that the content may be copied. 
[0381 1 In a case in which when recording the content, 
copy control information such as Encryption Mode Indi- 
cator is recorded in accordance with the DTCP. and the 
copy control Information Is of Copy-freely type, the input/ 
output l/F 140 determines that the content may not be 
copied later 

[0382] When the copy control information is of No- 
more-copies type, or when in the system there is, for 
example, a rule that Copy-one-generation type of copy 
control information is recorded without being converted 
and is treated as No-more-copies type of copy control 
information, and copy control information recorded un- 
der the condition is of Copy-one-generation type, the in- 
put/output l/F 140 determines that the content may not 
be copied later. 

[0383] When the analog content supplied to the input/ 
output i/F 140 includes, for example, a CGMS-A signal, 
in other words, in a case in which when recording the 
content, the CGMS-A signal is recorded with the con- 
tent, and the CGMS-A signal represents Copy-freely 
type. It is determined that the analog content may not 
be copied later. If the CGMS-A signal represents Copy- 
never type, it is determined that the analog content may 
not be copied later. 

[0384] In step S4116. if the input/output l/F 140 has 
determined that the analog content may not be copied 
later, it goes to step S4117. In step S4117. the input/ 
output l/F 140 outputs the supplied analog signal to the 
exterior and terminates the playback process. 
[0385] In step S4116, if the input/output l/F 140 has 
determined that the content may not be copied later, it 
goes to step S4118. In step 841 18. the input/output l/F 
140 outputs the analog content to the exterior in a form 
in which the analog content cannot be later copied, and 
the playback process ends. 

[0386] For example, when the recorded copy control 
information is of No-more-copies type, as described 
above, or in a case In which in the system there is a rule 
that Copy-one-generation type of copy control informa- 
tion is recorded without being converted and is treated 
as No-more-copies type, and copy control information 
recorded under the condition is Copy-one-generation 
type, the content may not be more copied. 
[0387] Therefore, after adding, for example, a Macro- 
vision signal or a CGMS-A signal representing Copy- 
never type to the analog content, the input/output l/F 140 
outputs the obtained content to the exterior. Also when 
the recorded CGMS-A signal represents Copy-never 
type, the content may not be more copied. Accordingly, 
after changing the CGMS-A signal to represent Copy- 
never type, the input/output l/F 1 40 outputs the changed 
CGMS-A signal to the exterior, with the analog content. 
[0388] As described above, by recording or playing 
back a content while performing content-copy control. 
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copying (unauthorized copying) beyond the allowable 
range of the content can be prevented. 

Structure of Data Processing Unit 

5 

[0389] The above successive processes can be per- 
formed not only by hardware but also by software. For 
example, although the cryptosystem unit 150 can be 
formed by an encryption/decryption LSI, processing by 

10 the cryptosystem unit 150 can be executed such that a 
general-purpose computer or a single-chip microcom- 
puter executes programs. Similarly, processing by the 
TS processing unit 300 can be also performed by soft- 
ware. When software is used to perform successive 

15 processes, programs constituting the software are in- 
stalled in a device such as a general-purpose computer 
or a single-chip microcomputer. Fig. 46 shows an exam- 
ple of a computer in which programs for executing the 
successive processes are installed. 

20 [0390] The programs can be recorded beforehand on 
a hard disk 4205 or a read-only memory (ROM) 4203 
as a recording medium which is built into the computer. 
Alternatively, the programs can be temporarily or eter- 
nally stored (recorded) in a removable recording medl- 

25 um 421 0 such as a floppy disk, a CD-ROM, a magneto- 
optical disk, a digital versatile disk, a magnetic disk, or 
a semiconductor memory. The removable recording me- 
dium 4210 can be provided in the form of so-called 
"package software", 
30 [0391] In addition to the installation of the programs 
from the removal recording medium 4210 in the compu- 
ter, after transmitting the programs from a download site 
to the computer by radio via a satellite for digital satellite 
broadcasting or by wire via a network such as the Inter- 
35 net, the transmitted programs are received In a commu- 
nication unit 4208 and can be installed in the hard disk 
4205 in the computer. 

[0392] The computer includes a CPU 4202. An input/ 
output interface 4211 is connected to the CPU 4202 via 

40 a bus 4201. When a command is Input by a user oper- 
ating an input unit 4207 having a keyboard and a mouse, 
the CPU 4202 executes a program stored in a ROM 
4203 in accordance with the input command. 
[0393] Also, the program stored in the hard disk 4205. 

45 the program installed in the hard disk 4205 after being 
transmitted via a satellite or a network and received by 
the communication unit 4208, or the program installed 
in the hard disk 4205 after being read from the removal 
recording medium 4210 is loaded and executed in the 

50 CPU 4202. 

[0394] This allows the CPU 4202 to perform the above 
processes in accordance with the above flowcharts or 
the processes performed by the block diagrams. The 
CPU 4202 outputs the obtained results from an output 

55 unit 4206 having a liquid crystal display, a speaker, etc.. 
transmits them from the communication unit 4208. and 
records them on the hard disk 4205. as required. 
[0395] Here, in this Specification, processing steps 
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that describe each program for controlling the computer 
to perform various types of processing do not always 
need to be time-sequentially performed along the order 
in flowchart form, and include processes (e.g.. parallel 
processes or object-based processes) which are exe- 5 
cuted in parallel or separately. 

[0396] Each program may be executed either by a sin- 
gle computer or by a plurality of computers. Each pro- 
gram may be executed after being transferred to a re- 
mote computer. 

[03971 In the second embodiment a case in which a 
content encryption/decryption block is formed by a sin- 
gle-chip encryption/decryption LSI has been mainly de- 
scribed. However, the content encryption/decryption 
block can be Implemented as a software module exe- ^ 
cuted by the CPU 170 in Fig. 1 or 2. Similarly, also 
processing by the TS processing unit 300 can be imple- 
mented as a software module executed by the CPU 1 70. 

Apparatus and Method for Producing Recording 2 
Medium 

[0398] Next, an apparatus and method according to 
an illustrative embodiment of the invention that produce 
the above information recording medium are described : 
below 

[0399] Fig. 47 shows a schematic structure of a disk 
production apparatus 4300 which produces a recording 
medium 4350 and records a disk ID, an enabling key 
block, and an encrypted master key or an encrypted me- 
dia key on a recording medium. 

[0400] In the disk production apparatus 4300, a disk 
ID, an enabling key block, and an encrypted master key 
or an encrypted media key are recorded on a recording 
medium 4350 which has already been assembled, with 
the above-described secret information. Also, pre-re- 
cording generation information of the master key is re- 
corded, as required, 

[0401] The disk production apparatus 4300 includes 
a memory 4302, or another storage unit, which contains 
disk IDs, enabling key blocks, and encrypted master 
keys or encrypted media keys, a recording medium l/F 
4303 that performs reading/writing from/to the recording 
medium 4350. an input/output l/F 4304 as an interface 
with another apparatus, a control unit 4301 for control- 
ling the above units, and a bus 4305 for establishing 
connection. 

[0402] Although Fig. 47 shows the structure in which 
the memory 4302 and the recording medium I/F 4304 
are Included in the disk production apparatus 4300, they 
may be externally provided. 

[0403] The disk ID. the enabling key block, and the 
encrypted master key or the encrypted media key. the 
secret information such as stamper ID, and the pre-re- 
cording generation information of master key are issued 
by an identifier management department, a key issuing 
center, etc.. which are not shown, and are stored be- 
forehand in the internal or extemal memory 4302. 



[0404] The disk ID. the enabling key block, and the 
encrypted master key or the encrypted media key. the 
secret Information, the pre-recording generation infor- 
mation of master key. which are stored in the memory 
4302, are recorded on the recording medium 4350 via 
the recording medium l/F 4303 under control of the con- 
trol unit 4301 . The pre-recording generation information 
of master key is also recorded, as required. 
[0405] The secret Information is data generated by a 

' secret information generator having the construction de- 
scribed in the Writing and Playback of Secret Informa- 
tion section, which are shown in, for example, Figs. 25 
and 27. In accordance with the controller, data conver- 
sion of the secret information is performed, and the re- 

5 sultant converted data is written on the recording medi- 
um 4350. 

[0406] Conceming the disk ID, the enabling key block, 
and the encrypted master key or the encrypted media 
key, the secret Information such as stamper ID, and the 
0 pre-recording generation information of master key, not 
only those stored in the memory 4302, but also those 
sent from the key issuing center via the input/output l/F 
4304 can be used. 

[0407] Fig. 48 shows a production flow in a recording 
?5 medium production method according to an embodi- 
ment of the invention in which in the production of a re- 
cording medium, the disk ID. the enabling key block, and 
the encrypted master key or the encrypted media key, 
the secret information, and the pre-recording generation 
30 information of master key are recorded on a recording 
medium. 

[0408] Referring to Fig. 48. in step S4401, a known 
assembly process (not shown) is used to assemble a 
recording medium such as a DVD or a Cited document. 

35 [0409] In step S4402. the recording medium produc- 
tion apparatus shown in Fig. 47 executes processing of 
recording, on the assembled recording medium, a disk 
ID, a stamper ID as secret infonnation, an enabling key 
block, and an encrypted master key or an encrypted me- 

40 dia key. Pre-recording generation information is also re- 
corded, as required. 

[0410] By using the above disk production process, 
the recording medium is shipped from a production fac- 
tory in the form of containing the disk ID. the stamper ID 
45 as secret information, the enabling key block, the en- 
crypted master key or the encrypted media key. Also, 
the recording medium is shipped from the production 
factory after the pre-recording generation number is re- 
corded on the recording medium, as required. 

50 [0411] The recorded secret information is not limited 
to the stamper ID. A disk ID set for each disk, a content 
ID for each content, a cryptographic key, various types 
of identification data, and an encryption key may be re- 
corded as the secret information. A recording/playback 

55 device of an embodiment of the invention uses the var- 
ious types of secret information to generate a content- 
encryption key. 
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Format of Enabling Key Block 

[0412] Fig. 49 shows an example of a format of the 

enabling key block. In Fig. 49. a version 4501 is an iden- 
tifier indicating the version of an enabling key block. A 
depth 4502 indicates a hierarchical-tree level number of 
a device to which the enabling key block is distributed. 
A data pointer 4503 indicates the position of a data part 
in the enabling key block. A tag pointer 4504 indicates 
the position of a tag part in the enabling key block. A 
signature 4508 indicates the position of a signature in 
the enabling key block. A data part 4506 stores, for ex- 
ample, data generated by encrypting a node key to be 
updated. 

[0413] The tag part 4507 indicates the positional re- 
lationship of the encrypted node keys and leaf key which 
are stored in the data part 4506. A rule of providing the 
tag is described with reference to Fig. 50. Fig. 50 shows 
an example of sending, as data, the enabling key block 
described using Fig. 12A. The data is as shown in the 
table of the right portion (b) of Fig. 50. The address of a 
top node included in an encryption key in this case is 
used as a top node address. As shown in the table, the 
top node address is KR because updating key K(t)R of 
root key is included. 

[041 4] Top encryption-key data Enc(K(t)0 . K(t)R) cor- 
responds to a denoted position in the hierarchical tree 
of the left portion (a) of Fig. 50. Next data is represented 
by Enc(K(t)0. K(t)O) and corresponds to a lower left po- 
sition from the previous data. The presence of data is 
indicated by a tag value of "0". while the absence of data 
is indicated by a tag value of "1". Each tag is set as {left 
(L) tag. right (R) tag}. Since the left of top encryption- 
key data Enc(K(t)0, K(t)R) has data, L tag = 0. Since the 
right of top encryption-key data Enc(K(t)0. K(t)R) has no 
data. R tag = 1. Tags are set for all of data, so that a 
data string and a tag string are formed, as shown in the 
bottom portion (c) of Fig. 50. 

[041 5] Concerning the order of node processing in the 
tree, it is preferable to use one of breadth first process- 
ing in which widthwise processing at the same level is 
first performed, and depth first processing in which dep- 
thwise processing is first performed. 
[041 6] Referring back to Fig. 49, the format of the en- 
abling key block is further described below. 
[0417] The signature is a digital signature performed 
by an authority that issues the enabling key block, such 
as key-management center, content provider, settle- 
ment authority. A device that receives the enabling key 
block uses signature verification to verify that the re- 
ceived enabling key block is issued by a right enabling 
key block issuer. 

[0418] In so far as the embodiments of the invention 
described above are implemented, at least in part, using 
software -control led data processing apparatus, it will be 
appreciated that a computer program providing such 
software control and a transmission, storage or other 
medium by which such a computer program is provided 



are envisaged as aspects of the present invention. 
[0419] With reference to specified embodiments, the 
present invention has been described. However, it is ob- 
vious that a person skilled tn the art will make a modifi- 
5 cation or substitution of the embodiments without de- 
parting from the scope of the present invention. For ex- 
ample, as described above, the foregoing embodiments 
describe a case in which a stamper ID is used as the 
secret information required for writing of data to be 
10 stored on a disk and playback processing. 

[0420] However, the secret information is not limited 
to the stamper ID, but may be a disk ID differently set 
for each disk, a content ID set for each content, a cryp- 
tosystem key, various identification data, and an encryp- 
ts tion key. In the foregoing embodiments, the present in- 
vention has been exemplified and should not be limited- 
ly Interpreted. 

20 Claims 

1 . An information recording device for recording Infor- 
mation on a recording medium, comprising: 

25 cryptosystem means for executing encryption 

processing on data to be stored on said record- 
ing medium; and 

secret-information decoding means for reading 
secret information stored on said recording me- 
30 dium by executing a special data-reading proc- 

ess which is different from a process of reading 
content data stored on said recording medium; 

wherein said cryptosystem means generates 
35 a content-encryption key by using, as a key-gener- 
ating data, the secret information which is decoded 
after being read from said recording medium, and 
executes, based on the content-encryption key, the 
encryption processing on the data to be stored. 

40 

2. An information recording device according to Claim 
1, wherein: 

the secret information includes a type of data 
45 among a stamper ID which is stored on said re- 

cording medium when said recording medium 

is produced and which is common to a plurality 
of recording media, a disk ID which is unique to 
each of the recording media, a content ID which 
50 is differently set for each content, and a crypto- 

system key; and 

said secret-information decoding means exe- 
cutes a decoding process on the read data. 

55 3. An information recording device according to Claim 
1. wherein said cryptosystem means uses the read 
secret information to generate the content-encryp- 
tion key. and the read secret information is allowed 
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to be used only in the generation of the content-en- 
cryption key which is executed in said cryptosystem 
means, without being stored in storage means 
which is readable from the outside of said informa- 
tion recording device. 

4. An information recording device according to Claim 

1, wherein: 

said information recording device possesses 
node keys which are unique to nodes constitut- 
ing a hierarchical tree structure having a plural- 
ity of different Information recording devices as 
leaves; 

said cryptosystem means generates the con- 
tent-encryption key based on the read secret 
information and encryption-key-generating da- 
ta which is stored in said information recording 
device; and 

the encryption-key-generating data can be up- 
dated by using an enabling key block generated 
such that a node key is encrypted by using a 
key including at least one of a node key and a 
leaf key which are positioned at a lower level. 

5. An information recording device according to Claim 
4. wherein the encryption-key-generating data is 
one of a master key common to a plurality of infor- 
mation recording devices and a media key unique 
to a specified recording medium. 

6. An information recording device according to Claim 
4, wherein: 

the encryption-key-generating data corre- 
sponds to a generation number as updating in- 
formation; and 

when storing encrypted data on said recording 
medium, said cryptosystem means stores on 
said recording medium the generation number 
of the encryption-key-generating data as a re- 
cording-mode generation number 

7. An information recording device according to Claim 
4. further comprising transport-stream processing 
means for adding an arrival time stamp to each of 
transport packets constituting a transport stream; 

said cryptosystem means generates a block 
key as an encrypted key for block data com- 
posed of at least one transport packet to which 
the arrival time stamp is added; and 
in encryption of the data to be stored on said 
recording medium, said cryptosystem means 
generates a block key as an encryption key 
based on data including the secret information, 
the encryption-key-generating data, and a 
block seed as additional information which in- 



cludes the arrival time stamp and which is 
unique to the block data. 

8. An information recording device according to Claim 
1, wherein: 

said secret-information decoding means is 
structured to execute decoding processing on 
data which is stored on said recording medium 
by using a binary sequence to disturb a string 
of bits constituting the secret information; and 
said secret-information decoding means exe- 
cutes decoding processing of the secret infor- 
mation by generating the binary sequence and 
executing arithmetic processing using the gen- 
erated binary sequence and a playback signal 
from said recording medium. 

An infomiation recording device according to Claim 
1 , wherein said secret-Information decoding means 
reads, from said recording medium, data which is 
recorded in a form converted in a predetermined 
manner from the secret information in units of a plu- 
rality of bits constituting the secret information, and 
25 executes decoding processing on the secret infor- 
mation by converting the read data again. 



10. An information playback device for playing back in- 
formation recorded on a recording medium, said in- 
30 formation playback device comprising: 

cryptosystem means for executing decryption 
processing on data read from said recording 
medium; and 

35 secret-information decoding means for reading 

secret information stored on said recording me- 
dium by executing a special data-reading proc- 
ess which is different from a process of reading 
content data stored on said recording medium; 



wherein said cryptosystem means generates 
a content-decryption key by using, as a key-gener- 
ating data, the secret information which is decoded 
after being read from said recording medium, and 
executes, based on the content-decryption key. the 
decryption processing on the read data. 

11. An information playback device according to Claim 
10. wherein: 

the secret information Includes a type of data 
among a stamper ID which is stored on said re- 
cording medium when said recording medium 
is produced and which is common to a plurality 
of recording media, a disk ID which is unique to 
each of the recording media, a content ID which 
is differently set for each content, and a crypto- 
system key; and 
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said secret-information decoding means exe- 
cutes a decoding process on the read data. 

12. An information playback device according to Claim 
1 0. wherein said cryptosystem means uses the read 5 
secret information to generate the content-decryp- 
tion key, and the read secret infomnation is allowed 
to be used only in the generation of the content-de- 
cryption key which is executed in said cryptosystem 
means, without being stored in storage means 
which is readable from the outside of said informa- 
tion recording device. 

13. An information playback device according to Claim 
10, wherein: 

said Information recording device possesses 
node keys which are unique to nodes constitut- 
ing a hierarchical tree structure having a plural- 
ity of different information recording devices as 20 
leaves; 

said cryptosystem means generates the con- 
tent-encryption key based on the read secret 
information and decryption- key-gene rating da- 
ta which is stored in said information recording 25 
device; and 

the decryption-key-generating data can be up- 
dated by using an enabling key block generated 
such that a node key is encrypted by using a 
key including at least one of a node key and a 30 
leaf key which are positioned at a lower level. 



14. An information playback device according to Claim 
13. wherein the decryption-key-generating data is 
one of a master key common to a plurality of infor- 
mation recording devices and a media key unique 
to a specified recording medium. 

1 5. An information playback device according to Claim 
13. wherein: 

the decryption-key-generating data corre- 
sponds to a generation number as updating in- 
formation; and 

when storing encrypted data on said recording 
medium, said cryptosystem means stores on 
said recording medium the generation number 
of the decryption-key-generating data as a re- 
cording-mode generation number. 

16. An information playback device according to Claim 
13, further comprising transport- stream processing 
means for adding an arrival time stamp to each of 
transport packets constituting a transport stream; 

said cryptosystem means generates a block 
key as an encrypted key for block data com- 
posed of at least one transport packet to which 



the arrival time stamp is added; and 
in decryption of the data to be stored on said 
recording medium, said cryptosystem means 
generates a block key as a decryption key 
based on data including the secret information, 
the decryption-key-generating data, and a 
block seed as additional information which in- 
cludes the arrival time stamp and which is 
unique to the block data. 

17. An information playback device according to Claim 
10, wherein: 

said secret-information decoding means is 
structured to execute decoding processing on 
data which is stored on said recording medium 
by using a binary sequence to disturta a string 
of bits constituting the secret information; and 
said secret-information decoding means exe- 
cutes decoding processing of the secret infor- 
mation by generating the binary sequence and 
executing arithmetic processing using the gen- 
erated binary sequence and a playback signal 
from said recording medium. 

18. An information playback device according to Claim 
10. wherein said secret-information decoding 
means reads, from said recording medium, data 
which is recorded in a form converted in a predeter- 
mined manner from the secret information in units 
of a plurality of bits constituting the secret informa- 
tion, and executes decoding processing on the se- 
cret information by converting the read data again. 

35 19. An information recording method for recording in- 
formation on a recording medium, said information 
recording method comprising: 

a secret-information decoding step which reads 
40 secret information stored on said recording me- 

dium by executing a special data-reading proc- 
ess which is different from a process of reading 
content data stored on said recording medium; 
and 

45 a cryptosystem step which generates a con- 

tent-encryption key by using, as a key-generat- 
ing data, the secret infomnation which is decod- 
ed after being read from said recording medium 
In said secret-information decoding step, and 

50 executes, based on the content-encryption key, 

the encryption processing on the data to be 
stored. 

20. An information recording method according to 
55 Claim 19, wherein: 

the secret information includes a type of data 
among a stamper ID which is stored on said re- 
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cording medium when said recording medium 
Is produced and which is common to a plurality 
of recording media, a disk ID which is unique to 
each of the recording media, a content ID which 
is differently set for each content, and a crypto- 
system key; and 

said secret-information decoding means exe- 
cutes a decoding process on the read data. 

21. An information recording method according to 
Claim 19, wherein said cryptosystem step includes 
a step which uses the read secret information to 
generate the content-encryption key, and the read 
secret information is allowed to be used only in the 
generation of the content-encryption key which is 
executed In said cryptosystem step, without being 
stored in storage means which is readable from the 
outside of said information recording device. 

22. An information recording method according to 
Claim 19, wherein: 

said cryptosystem step includes a step which 
generates the content-encryption key based on 
the read secret information and encryption- 
key-generating data which is stored in said in- 
formation recording device; and 
the encryption-key-generating data can be up- 
dated by an enabling key block generated such 
that in a hierarchical tree structure having a plu- 
rality of different information recording devices 
as leaves, branches as nodes, and unique keys 
set for said leaves and said nodes, a node key 
is encrypted by using a key including at least 
one of a node key and a leaf key which are po- 
sitioned at a lower level. 
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23. An information recording method according to 
Claim 22. wherein the encryption-key-generating 
data is one of a master key common to a plurality 40 
of information recording devices and a media key 
unique to a specified recording medium. 



each of transport packets constituting a transport 
stream; 

said cryptosystem step includes a step which 
generates a block key as an encrypted key for 
block data composed of at least one transport 
packet to which the arrival time stamp is added; 
and 

in encryption of the data to be stored on said 
recording medium, said cryptosystem step 
generates a block key as an encryption key 
based on data including the secret information, 
the encryption-key-generating data, and a 
block seed as additional infomnation which In- 
cludes the arrival time stamp and which is 
unique to the block data. 

26. An information recording method according to 
Claim 19, wherein: 

said secret-information decoding step includes 
a step which executes decoding processing on 
data which is stored on said recording medium 
by using a binary sequence to disturb a string 
of bits constituting the secret information; and 
said secret-information decoding, step exe- 
cutes decoding processing of the secret infor- 
mation by generating the binary sequence and 
executing arithmetic processing using the gen- 
erated binary sequence and a playback signal 
from said recording medium. 

27. An information recording method according to 
Claim 19. wherein said secret-information decoding 
step reads, from said recording medium, data which 
is recorded in a form converted in a predetermined 
manner from the secret information in units of a plu- 
rality of bits constituting the secret information, and 
executes decoding processing on the secret infor- 
mation by converting the read data again. 



24. An information recording method according to 
Claim 22, wherein: 

the encryptlon-key-generating data corre- 
sponds to a generation number as updating in- 
formation; and 

when storing encrypted data on said recording 
medium, said cryptosystem step stores on said 
recording medium the generation number of 
the encryption-key-generating data as a re- 
cording-mode generation number. 

25. An Information recording method according to 
Claim 22. further comprising a transport-stream 
processing step for adding an arrival time stamp to 
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28. An information playback method for playing back in- 
formation from a recording medium, said infonna- 
tion playback method comprising: 

a secret-information decoding step which reads 
secret information stored on said recording me- 
dium by executing a special data-reading proc- 
ess which is different from a process of reading 
content data stored on said recording medium; 
and 

a decryption step which generates a content- 
decryption key by using, as a key-generating 
data, the secret information which is decoded 
after being read from said recording medium in 
said secret-information decoding step, and ex- 
ecutes, based on the content-decryption key, 
the decryption processing on the read data. 
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29. An information playback method according to Claim 
28. wherein: 

the secret information includes a type of data 
among a stamper ID which is stored on said re- 
cording medium when said recording medium 
is produced and which is common to a plurality 
of recording media, a disk ID which is unique to 
each of the recording media, a content I D which 
Is differently set for each content, and a crypto- 
system key; and 

said secret-information decoding step exe- 
cutes a decoding process on the read data. 

30. An Information playback method according to Claim 
28, wherein said decryption step includes a step 
which uses the read secret information to generate 
the content-decryption key. and the read secret in- 
formation is allowed to be used only in the genera- 

^ tion of the content-decryption key which is executed 
in said cryptosystem means, without being stored 
in storage means which is readable from the outside 
of said information recording device. 

31 . An information playback method according to Claim 
28, wherein: 

said decryption step includes a step which gen- 
erates the content-decryption key based on the 
read secret information and decryption-key- 
generating data which is stored in said informa- 
tion recording device; and 
the decryption-key-generating data can be up- 
dated by an enabling key block generated such 
that in a hierarchical tree structure having a plu- 
rality of different information recording devices 
as leaves, branches as nodes, and unique keys 
set for said leaves and said nodes, a node key 
is encrypted by using a key including at least 
one of a node key and a leaf key which are po- 
sitioned at a lower level. 

32. An information playback method according to Claim 
31, wherein the decryption-key-generating data is 
one of a master key common to a plurality of infor- 
mation playback devices and a media key unique 
to a specified recording medium. 

33. An information playback method according to Claim 
31, wherein: 

the decryption-key-generating data corre- 
sponds to a generation number as updating in- 
formation; and 

when storing encrypted data on said recording 
medium, said decryption step stores on said re- 
cording medium the generation number of the 
decryption-key-generating data as a recording- 



mode generation number. 

34. An information playback method according to Claim 
31. further comprising a transport-stream process- 
5 ing step for adding an arrival time stamp to each of 

transport packets constituting a transport stream; 

said decryption step includes a step which gen- 
erates a block key as an encryption key for 
10 block data composed of at least one transport 

packet to which the arrival time stamp is added; 
and 

in playback of the data to be stored on said re- 
cording medium, said decryption step gener- 
is ates a block key as a decryption key based on 
data including the secret information, the de- 
cryption-key-generating data, and a block seed 
as additional information which includes the ar- 
rival time stamp and which is unique to the 
20 block data. 

35. An information playback method according to Claim 
28. wherein: 

25 said secret-information decoding step includes 

a step which executes decoding processing on 
data which is stored on said recording medium 
by using a binary sequence to disturb a string 
of bits constituting the secret information; and 

30 said secret-information decoding step exe- 

cutes decoding processing of the secret infor- 
mation by generating the binary sequence and 
executing arithmetic processing using the gen- 
erated binary sequence and a playback signal 

35 from said recording medium. 

36. An information playback method according to Claim 
28. wherein said secret-information decoding step 
reads, from said recording medium, data which is 

40 recorded in a form converted in a predetermined 
manner from the secret information in units of a plu- 
rality of bits constituting the secret information, and 
executes decoding processing on the secret infor- 
mation by converting the read data again. 

45 

37. An information recording medium containing: 

secret information which can be played back 

only by executing a special data-reading proc- 
50 ess different from an ordinary data-reading 

process; and 

an encrypted content which can be decrypted 
by using a cryptosystem key which can be gen- 
erated by using said secret information. 

55 

38. An information recording medium according to 
Claim 37. wherein said secret information includes 
a type of data among a stamper ID common to a 



38 
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plurality of recording media, a disk ID which is 
unique to each of the recording media, a content ID 
which is differently set for each content, and a cryp- 
tosystem key. 

39. A program providing medium for providing a com- 
puter program which controls a computer system to 
execute information-recording processing for re- 
cording information on a recording medium, said 
computer program comprising: 

a secret-infonnation decoding step which reads 
secret information stored on said recording me- 
dium by executing a special data-reading proc- 
ess which is different from a process of reading 
content data stored on said recording medium; 
and 

a cryptosystem step which generates a con- 
tent-encryption key by using, as a key-generat- 
ing data, the secret information which is decod- 
ed after being read from said recording medium 
in said secret-information decoding step, and 
executes, based on the content-encryption key. 
the encryption processing on the data to be 
stored. 

40. A program providing medium for providing a com- 
' puter program which controls a computer system to 
execute information-playback processing for play- 
ing back information stored on a recording medium, 
said computer program comprising: 

a secret-information decoding step which reads 

secret information stored on said recording me- 
dium by executing a special data-reading proc- 
ess which is different from a process of reading 
content data stored on said recording medium; 
and 

a decryption step which generates a content- 
decryption key by using, as a key-generating 
data, the secret information which is decoded 
after being read from said recording medium in 
said secret-information decoding step, and ex- 
ecutes, based on the content-decryption key. 
the decryption processing on the read data. 
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